29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:42 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:42 executing program 5:
r0 = getpgid(0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sched_setparam(r0, &(0x7f0000000000)=0x5691)
r1 = getpgid(r0)
r2 = pidfd_open(r1, 0x0)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)

19:07:42 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:42 executing program 3:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:42 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:42 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:42 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:42 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:42 executing program 3:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:43 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:43 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:43 executing program 1:
r0 = getpgid(0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sched_setparam(r0, &(0x7f0000000000)=0x5691)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
getpid()
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x100)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080))
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x90800, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000100)={0x8b1c, 0x0, 0x10000})
ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000140)={0x0, 0x1, 0x5, 0x3, 0xfffffff8, 0x7, 0x101, 0x2, 0x800, 0x6, 0x3, 0x207})
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000001c0)={<r4=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000200)={r4, 0x3})
r5 = pidfd_getfd(r1, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000240)={0x7fffffffffffffff, r1, 0x80000})
r6 = getegid()
setgroups(0x4, &(0x7f0000000280)=[0x0, r6, 0xee00, 0xffffffffffffffff])
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f00000002c0)={<r7=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r5, 0xc0086423, &(0x7f0000000300)={r7, 0x3})
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
r8 = getpgid(r0)
migrate_pages(r8, 0x8, &(0x7f0000000340)=0x8, &(0x7f0000000380)=0x6)
r9 = pidfd_open(r8, 0x0)
r10 = pidfd_getfd(r9, r2, 0x0)
r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r11, 0xc00c642d, &(0x7f0000000400))
accept4$x25(r10, &(0x7f0000000440)={0x9, @remote}, &(0x7f0000000480)=0x12, 0x80800)
prctl$PR_SET_PDEATHSIG(0x1, 0x29)

19:07:43 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:43 executing program 5:
r0 = getpgid(0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sched_setparam(r0, &(0x7f0000000000)=0x5691)
r1 = getpgid(r0)
pidfd_open(r1, 0x0)

19:07:43 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:43 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:43 executing program 3:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:43 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:43 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:43 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:43 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:43 executing program 3:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:43 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:43 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:44 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:44 executing program 3:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:44 executing program 5:
r0 = getpgid(0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sched_setparam(r0, &(0x7f0000000000)=0x5691)
pidfd_open(0x0, 0x0)

19:07:44 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:44 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:44 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:44 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:44 executing program 3:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:44 executing program 3:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:44 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:44 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:44 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:44 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:44 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:45 executing program 5:
r0 = getpgid(0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sched_setparam(r0, &(0x7f0000000000)=0x5691)
pidfd_open(0x0, 0x0)

19:07:45 executing program 3:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:45 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:45 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:45 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:45 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

[  258.880121][   T26] kauditd_printk_skb: 30 callbacks suppressed
[  258.880134][   T26] audit: type=1326 audit(1680116865.355:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22510 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b40c8c0f9 code=0x0
19:07:45 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

[  258.930270][   T26] audit: type=1326 audit(1680116865.405:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22510 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b40c8c0f9 code=0x0
19:07:45 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:45 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:45 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:45 executing program 3:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:45 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:46 executing program 5:
r0 = getpgid(0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sched_setparam(r0, &(0x7f0000000000)=0x5691)
pidfd_open(0x0, 0x0)

19:07:46 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:46 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:46 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:46 executing program 3:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:46 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:46 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

[  259.738351][   T26] audit: type=1326 audit(1680116866.215:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22637 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b40c8c0f9 code=0x0
19:07:46 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

[  259.790920][   T26] audit: type=1326 audit(1680116866.265:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22637 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b40c8c0f9 code=0x0
19:07:46 executing program 3:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:46 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:46 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:46 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:47 executing program 5:
r0 = getpgid(0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r1, 0x0)

19:07:47 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:47 executing program 3:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:47 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:47 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:47 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

[  260.597101][   T26] audit: type=1326 audit(1680116867.065:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22744 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b40c8c0f9 code=0x0
19:07:47 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:47 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

[  260.653198][   T26] audit: type=1326 audit(1680116867.125:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22744 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b40c8c0f9 code=0x0
19:07:47 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:47 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:47 executing program 3:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:47 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:47 executing program 5:
r0 = getpgid(0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r1, 0x0)

19:07:47 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, <r7=>r0, 0x80000})
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@t={0x85, 0x2, 0x7f, 0x1f})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:47 executing program 2:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:47 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:47 executing program 3:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:47 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

[  261.459389][   T26] audit: type=1326 audit(1680116867.935:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22882 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b40c8c0f9 code=0x0
19:07:48 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:48 executing program 4:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:48 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:48 executing program 2:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:48 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:48 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:48 executing program 5:
r0 = getpgid(0xffffffffffffffff)
r1 = getpgid(r0)
pidfd_open(r1, 0x0)

19:07:48 executing program 2:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:48 executing program 4:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:48 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:48 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:48 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:48 executing program 5:
r0 = getpgid(0x0)
pidfd_open(r0, 0x0)

19:07:48 executing program 5:
getpgid(0x0)
pidfd_open(0x0, 0x0)

19:07:48 executing program 5:
getpgid(0x0)
pidfd_open(0x0, 0x0)

19:07:48 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r0, r4, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:48 executing program 5:
getpgid(0x0)
pidfd_open(0x0, 0x0)

19:07:48 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:48 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r0, r4, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:49 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:49 executing program 4:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:49 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:49 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r0, r4, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:49 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:49 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r0, r4, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:49 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:49 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:49 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:49 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:49 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:49 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:49 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:49 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:49 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r0, r4, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:49 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:49 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:49 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:49 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:49 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r0, r4, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:49 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r1, r5, 0x0)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:49 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:49 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:50 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:50 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r0, r4, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:50 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:50 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r1, r5, 0x0)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:50 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:50 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:50 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r1, r5, 0x0)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:50 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:50 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:50 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:50 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r1, r5, 0x0)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:50 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r1, r5, 0x0)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:50 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:50 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r1, r5, 0x0)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:50 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:50 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:50 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r1, r5, 0x0)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:50 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:50 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:50 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:50 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r1, r5, 0x0)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:50 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:51 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:51 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:51 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r1, r5, 0x0)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:51 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:51 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:51 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:51 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:51 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:51 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:51 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:51 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:51 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:51 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:51 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:51 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:51 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:51 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:51 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:51 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:51 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:51 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:51 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:51 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:52 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:52 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:52 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:52 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:52 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:52 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:52 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:52 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:52 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:52 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:52 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:52 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:52 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:52 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:52 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:52 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:52 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:52 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:52 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:52 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:52 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_getfd(r0, r1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:53 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:53 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:53 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:53 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:53 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:53 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_getfd(r0, r1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:53 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:53 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:53 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:53 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:53 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:53 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:53 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:53 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:53 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:53 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:53 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:53 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:53 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:53 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:53 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:53 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:53 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:53 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
connect$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:54 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:54 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:54 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:54 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:54 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
connect$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:54 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:54 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:54 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:54 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:54 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
connect$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:54 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:54 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:54 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:54 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:54 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:54 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:54 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:54 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:54 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:54 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:54 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:55 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
connect$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:55 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:55 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:55 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:55 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:55 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:55 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:55 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
connect$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:55 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:55 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:55 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:55 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:55 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:55 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:55 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
connect$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:55 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:55 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:55 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:55 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:55 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:55 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:56 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:56 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:56 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:56 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:56 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:56 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:56 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:56 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:56 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:56 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:56 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:56 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:56 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:56 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:56 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:56 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:56 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:56 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:56 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:56 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:56 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:57 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:57 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
connect$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:57 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:57 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:57 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:57 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:57 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
connect$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:57 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:57 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:57 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:57 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:57 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
connect$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:57 executing program 5:
r0 = syz_open_dev$mouse(0x0, 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:57 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:57 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
connect$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:57 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:57 executing program 5:
r0 = syz_open_dev$mouse(0x0, 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:57 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:57 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:57 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
connect$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:57 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:57 executing program 5:
r0 = syz_open_dev$mouse(0x0, 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:57 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:58 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
connect$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:58 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:58 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:58 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:58 executing program 5:
syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 5:
syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:59 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 5:
syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:59 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:07:59 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 1:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:07:59 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:00 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:00 executing program 1:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:00 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:00 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:00 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$llc(r0, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r1, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:00 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:00 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:00 executing program 1:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:00 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:00 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:00 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:00 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$llc(r0, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r1, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:00 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:00 executing program 1:
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:00 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:00 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:00 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:00 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$llc(r0, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r1, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:00 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:00 executing program 1:
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:00 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:00 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:00 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:00 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 1:
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 3:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:01 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 3:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000340)=""/29, 0x1d)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:01 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r1, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 3:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:01 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:01 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:02 executing program 3:
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:02 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:02 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:02 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:02 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:02 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:02 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x1704, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:02 executing program 0:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r2 = pidfd_getfd(r0, r1, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:02 executing program 3:
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:02 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:02 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:02 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x1704, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:02 executing program 0:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r2 = pidfd_getfd(r0, r1, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:02 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:02 executing program 3:
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:02 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x1704, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:02 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:02 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:02 executing program 0:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r2 = pidfd_getfd(r0, r1, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:02 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:02 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:02 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:02 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:02 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:02 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:03 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:03 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:03 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:03 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:03 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:03 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:03 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:03 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:03 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:03 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:03 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:03 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:03 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:03 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:03 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:03 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:03 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000640))

19:08:03 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:03 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:03 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:03 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:03 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000640))

19:08:03 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:03 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:03 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(0xffffffffffffffff, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:03 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:04 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000640))

19:08:04 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:04 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:04 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), 0x0)

19:08:04 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(0xffffffffffffffff, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:04 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:04 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(0xffffffffffffffff, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:04 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:04 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x103003)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:04 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), 0x0)

19:08:04 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$sequencer(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), 0x0)

19:08:04 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:04 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(0xffffffffffffffff, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:04 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(0xffffffffffffffff, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:04 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:04 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x103003)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:04 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x103003)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:04 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:04 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x103003)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:04 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(0xffffffffffffffff, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:04 executing program 2:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:04 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(0xffffffffffffffff, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:04 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:04 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:04 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x0, 0x103003)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:04 executing program 4:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:05 executing program 2:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:05 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(0xffffffffffffffff, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:05 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:05 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:05 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x0, 0x103003)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:05 executing program 4:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:05 executing program 2:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:05 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:05 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:05 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x0, 0x103003)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:05 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:05 executing program 4:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:05 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:05 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:05 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:05 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:05 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:05 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:05 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:05 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:05 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
r2 = syz_open_dev$mouse(0x0, 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:06 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:06 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:06 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:06 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:06 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
r2 = syz_open_dev$mouse(0x0, 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:06 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:06 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:06 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:06 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:06 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
r2 = syz_open_dev$mouse(0x0, 0x2, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:06 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:06 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100))
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:06 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:06 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:06 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:06 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:06 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:06 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100))
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:06 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:06 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x0)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:06 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:06 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$llc(r0, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r1, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:06 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100))
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:07 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:07 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:07 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x0)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:07 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$llc(r0, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r1, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:07 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:07 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(0x0, 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:07 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:07 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:07 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x0)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:07 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$llc(r0, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r1, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:07 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(0x0, 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:07 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:07 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:07 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:07 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:07 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:07 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(0x0, 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:07 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:07 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:07 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:07 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:08 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:08 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:08 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:08 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:08 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:08 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:08 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:08 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:08 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:08 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:08 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:08 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r3, r0, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:08 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:08 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:08 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:08 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:08 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:08 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
r5 = pidfd_getfd(r0, r4, 0x0)
read$sequencer(r5, &(0x7f0000000340)=""/29, 0x1d)
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:08 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:08 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:08 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:09 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:09 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:09 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:09 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(r0, r4, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:09 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:09 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:09 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:09 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:09 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:09 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:09 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:09 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:09 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:09 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:09 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:09 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:09 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, 0x0)
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:09 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:09 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:09 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:09 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:09 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, 0x0)
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:09 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:10 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:10 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:10 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, 0x0)
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:10 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:10 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:10 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:10 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:10 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$llc(r0, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:10 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:10 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:10 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:10 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:10 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:10 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$llc(r0, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:10 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:10 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:10 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:10 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:10 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:10 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:10 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$llc(r0, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:10 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:10 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:11 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:11 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:11 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:11 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:11 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:11 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:11 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:11 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:11 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:11 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:11 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:11 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:11 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x0, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:11 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:11 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:11 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:11 executing program 0:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x0, r0, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:11 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:11 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:11 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:11 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:11 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:11 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:11 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:12 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:12 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:12 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:12 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:12 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:12 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:12 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:12 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:12 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:12 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:12 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:12 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:12 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:12 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:12 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:12 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:12 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:12 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:12 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:12 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:12 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:12 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
connect$llc(r2, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:12 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:12 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:12 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:13 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:13 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:13 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:13 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:13 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:13 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(r0, r1, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000300))
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:13 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:13 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:13 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:13 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:13 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:13 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:13 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:13 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:13 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:13 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:13 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:13 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:13 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:13 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:13 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x5b22}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:13 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:13 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:13 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:13 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x5b22}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:14 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:14 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f00000001c0)='./file0\x00')
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:14 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:14 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x5b22}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:14 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:14 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:14 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:14 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:14 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:14 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:14 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:14 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:14 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:14 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000640))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:14 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:14 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:14 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:14 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc9, 0x400, 0x7fffffff, 0x8, 0x2, 0x0, "24a70fab3535181e6c15a45013859d7d6afa168441716089af10035cc8e272a3e454297c02492a5abd4ce69787615af7ec733f777df82dc3c9e32b13fb49abc796dac09e2c0530355807e2b95b81fa3897935afc229794ace962150fda4f9b4ddaf02e3b2841ff7cdbc015a1ca5590033a109cfc3ef9a9072e1ce9b7efd68aaf2183e0c53dee0852a7fcce43c5dc19ba2b5cb4128e9d91a2a54b4722d45af5a82f75ec1962567df9575a222edf7ff20155f67c9d6e181ff6f7750a7e3c39046db8dd398bf893eecc8e"}}, 0x1e1)

19:08:14 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100))
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:14 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100))
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:14 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:14 executing program 0:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r0 = syz_open_dev$mouse(0x0, 0x800, 0x0)
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x400)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x80000})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)

19:08:14 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:14 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:15 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:15 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100))
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:15 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100))
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:15 executing program 0:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:15 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:15 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:15 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:15 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100))
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:15 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:15 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100))
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xa6, 0x16, 0x40})
fanotify_mark(r1, 0x40, 0x1, r2, &(0x7f00000001c0)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = pidfd_getfd(r1, r2, 0x0)
connect$llc(r3, &(0x7f0000000200)={0x1a, 0x5016eedaf8c89ec6, 0x8, 0x20, 0x1, 0x3e, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000300))
r6 = pidfd_getfd(r1, r5, 0x0)
read$sequencer(r6, &(0x7f0000000340)=""/29, 0x1d)
pidfd_getfd(r4, r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000380)={0x6, r0, 0x80000})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:15 executing program 0:
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000300))
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000400)={0x7a, "a2e3d7f25670b9d218247d1df0e52714c09c4693d5834b38f4332e4bcac9e372811d567d2961f06b5583a27399a56cb17281c91835e881426e85ef17b9e60e6026fb653deb00fe41272911b78073c76b998b2334ee07c58cd37055c80c0d304e6dd046ab1ba18d834e8a789bc1b7945e21c882663591d081d776c06cfd3746c5"})
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

[  289.053104][T29634] list_del corruption. next->prev should be ffff88802205d000, but was 046801df000073c9. (next=ffff888060701000)
19:08:15 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40342, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x3})
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0)
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

19:08:15 executing program 3:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x103003)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
connect$llc(r1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000300))
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000540)={0xffff, "5f173f617af30fdefdea703fb5bcbd85d4e0ebf2248e31de308a418b9944bcc7"})
syz_io_uring_setup(0x1704, &(0x7f0000000580)={0x0, 0x5b22, 0x0, 0x0, 0x391}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))

[  289.101849][T29634] ------------[ cut here ]------------