6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x3, 0x851411e, 0x1f], 0x3, 0xc00, 0x0, 0xffffffffffffffff}) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r9, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, &(0x7f00000004c0)={0x40002000}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000200)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r7}) r10 = openat$incfs(r8, &(0x7f0000000140)='.log\x00', 0x10080, 0x180) getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000180), &(0x7f0000000240)=0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:00:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.log\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000000c0)={r5}) 00:00:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x440500) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={0x6, 0x9, 0x4, 0xf767, 0x9}) 00:00:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000080)=[0x0, 0x8, 0x2], &(0x7f00000000c0)=[0xff, 0x1000, 0x3ff, 0x81, 0x5, 0x1, 0x1000], &(0x7f0000000140)=[0x7]}) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x200000000, 0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000080)=[0x0, 0x8, 0x2], &(0x7f00000000c0)=[0xff, 0x1000, 0x3ff, 0x81, 0x5, 0x1, 0x1000], &(0x7f0000000140)=[0x7]}) (async) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x200000000, 0x0, 0x1}) (async) 00:00:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f00000000c0)={0x10dca00, 0x3f, 0xff, 0xc0c0c0c0}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000080)) (rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) 00:00:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x101) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x100, 0x48a001) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000140)={r4, 0x17, 0x1f, 0x2, 0x3, 0x9, 0xfffffffe, 0x2, 0x2, 0x87, 0xfffc, 0x8001}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:00:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @default}, [@netrom, @remote, @netrom, @default, @remote, @netrom, @bcast, @netrom]}, &(0x7f0000000340)=0x48, 0x80400) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000380)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000003c0)={"f0fb0d84997848e436f25a8e98c5c4af", r3, 0x0, {0x3, 0x10000}, {0x800000000000005, 0x98}, 0x7f, [0x3, 0x5, 0x3, 0x2, 0x8000000000000000, 0x1000, 0x3, 0x2, 0x18, 0x4000000, 0x8, 0x5, 0x100000000, 0x1, 0x3f, 0x8000]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000280)) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x3, 0x851411e, 0x1f], 0x3, 0xc00, 0x0, 0xffffffffffffffff}) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r9, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, &(0x7f00000004c0)={0x40002000}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000200)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r7}) r10 = openat$incfs(r8, &(0x7f0000000140)='.log\x00', 0x10080, 0x180) getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000180), &(0x7f0000000240)=0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) accept4$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @default}, [@netrom, @remote, @netrom, @default, @remote, @netrom, @bcast, @netrom]}, &(0x7f0000000340)=0x48, 0x80400) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000003c0)={"f0fb0d84997848e436f25a8e98c5c4af", r3, 0x0, {0x3, 0x10000}, {0x800000000000005, 0x98}, 0x7f, [0x3, 0x5, 0x3, 0x2, 0x8000000000000000, 0x1000, 0x3, 0x2, 0x18, 0x4000000, 0x8, 0x5, 0x100000000, 0x1, 0x3f, 0x8000]}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000280)) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x3, 0x851411e, 0x1f], 0x3, 0xc00}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r9, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, &(0x7f00000004c0)={0x40002000}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000200)={r7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r7}) (async) openat$incfs(r8, &(0x7f0000000140)='.log\x00', 0x10080, 0x180) (async) getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000180), &(0x7f0000000240)=0x4) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) (async) 00:00:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.log\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000000c0)={r5}) 00:00:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x440500) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={0x6, 0x9, 0x4, 0xf767, 0x9}) syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x440500) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={0x6, 0x9, 0x4, 0xf767, 0x9}) (async) 00:00:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 00:00:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) (async) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @default}, [@netrom, @remote, @netrom, @default, @remote, @netrom, @bcast, @netrom]}, &(0x7f0000000340)=0x48, 0x80400) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000380)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000003c0)={"f0fb0d84997848e436f25a8e98c5c4af", r3, 0x0, {0x3, 0x10000}, {0x800000000000005, 0x98}, 0x7f, [0x3, 0x5, 0x3, 0x2, 0x8000000000000000, 0x1000, 0x3, 0x2, 0x18, 0x4000000, 0x8, 0x5, 0x100000000, 0x1, 0x3f, 0x8000]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000280)) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x3, 0x851411e, 0x1f], 0x3, 0xc00, 0x0, 0xffffffffffffffff}) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r9, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, &(0x7f00000004c0)={0x40002000}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000200)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r7}) (async) r10 = openat$incfs(r8, &(0x7f0000000140)='.log\x00', 0x10080, 0x180) getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000180), &(0x7f0000000240)=0x4) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:00:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x101) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x100, 0x48a001) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000140)={r4, 0x17, 0x1f, 0x2, 0x3, 0x9, 0xfffffffe, 0x2, 0x2, 0x87, 0xfffc, 0x8001}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:00:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x3ff, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000080)=""/48, 0x30, 0x0, &(0x7f00000000c0)=""/9, 0x9}}, 0x10) 00:00:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 00:00:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x440500) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={0x6, 0x9, 0x4, 0xf767, 0x9}) 00:00:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f00000000c0)={0x10dca00, 0x3f, 0xff, 0xc0c0c0c0}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r1}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) 00:00:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x80000081, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000140)) r4 = openat$incfs(r1, &(0x7f0000000180)='.log\x00', 0x180, 0x118) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x9, 0x2, 0x401}) 00:00:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000080)=[0x352, 0x4, 0x5, 0xd4, 0x2, 0x6, 0x7], &(0x7f00000000c0)=[0x1000, 0xfff8, 0x6, 0x9], &(0x7f0000000140)=[0x4, 0x8, 0x4, 0x3, 0x6, 0x80, 0xff, 0x8, 0x2, 0xb3c4]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x20000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000280)) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000180)={0x800, 0x2, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:00:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async, rerun: 32) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x10000, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 00:00:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x3, 0x1400, 0x0, 0xff8, 0x2, 0x100, 0xe99e, 0x6, 0x9}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x5, 0x7}) 00:00:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:00:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x3ff, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000080)=""/48, 0x30, 0x0, &(0x7f00000000c0)=""/9, 0x9}}, 0x10) 00:00:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x80000081, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000140)) r4 = openat$incfs(r1, &(0x7f0000000180)='.log\x00', 0x180, 0x118) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x9, 0x2, 0x401}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x400000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x80000081, 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000140)) (async) openat$incfs(r1, &(0x7f0000000180)='.log\x00', 0x180, 0x118) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x9, 0x2, 0x401}) (async) 00:00:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000080)=[0x352, 0x4, 0x5, 0xd4, 0x2, 0x6, 0x7], &(0x7f00000000c0)=[0x1000, 0xfff8, 0x6, 0x9], &(0x7f0000000140)=[0x4, 0x8, 0x4, 0x3, 0x6, 0x80, 0xff, 0x8, 0x2, 0xb3c4]}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x20000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000280)) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000180)={0x800, 0x2, 0x0, 0xeeeeeeee}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:00:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r2}) 00:00:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x3, 0x1400, 0x0, 0xff8, 0x2, 0x100, 0xe99e, 0x6, 0x9}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x5, 0x7}) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x3, 0x1400, 0x0, 0xff8, 0x2, 0x100, 0xe99e, 0x6, 0x9}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x5, 0x7}) (async) 00:00:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:00:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x3ff, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000080)=""/48, 0x30, 0x0, &(0x7f00000000c0)=""/9, 0x9}}, 0x10) 00:00:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x80000081, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000140)) r4 = openat$incfs(r1, &(0x7f0000000180)='.log\x00', 0x180, 0x118) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x9, 0x2, 0x401}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x400000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x80000081, 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000140)) (async) openat$incfs(r1, &(0x7f0000000180)='.log\x00', 0x180, 0x118) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x9, 0x2, 0x401}) (async) 00:00:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000080)=[0x352, 0x4, 0x5, 0xd4, 0x2, 0x6, 0x7], &(0x7f00000000c0)=[0x1000, 0xfff8, 0x6, 0x9], &(0x7f0000000140)=[0x4, 0x8, 0x4, 0x3, 0x6, 0x80, 0xff, 0x8, 0x2, 0xb3c4]}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x20000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000280)) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000180)={0x800, 0x2, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:00:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r2}) 00:00:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x3, 0x1400, 0x0, 0xff8, 0x2, 0x100, 0xe99e, 0x6, 0x9}) (rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x5, 0x7}) 00:00:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:00:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r2}) 00:00:57 executing program 2: ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000040)={0x2000001, 0x0, 0xffffff7f, 0x0, 0x0, 0x100}) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x84800) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)) 00:00:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xa, 0x81, 0x1f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000100)=0xb2c4, 0x2) 00:00:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f0000000240)={0xffff, 0x1ff, 0x0, 0x8, 0x36, 0xfffffffffffffffc}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r4}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x4, @local, 0x5}, {0xa, 0x4e20, 0x9, @private1, 0x4}, 0xffffffffffffffff, 0x9}}, 0x48) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000180)={0x3f, 0x800, 0x7fffffff, 0x6, 0x1, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:00:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0xffffffff, 0x200, 0x6}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r5}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000140)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, &(0x7f0000000180)={r7, r8, 0x8ed, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000200)={r3}) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x309080) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f0000000280)={r3}) 00:00:57 executing program 4: getrusage(0x1, &(0x7f0000000140)) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) 00:00:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r5}) 00:00:57 executing program 2: ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000040)={0x2000001, 0x0, 0xffffff7f, 0x0, 0x0, 0x100}) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x84800) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000040)={0x2000001, 0x0, 0xffffff7f, 0x0, 0x0, 0x100}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x84800) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)) (async) 00:00:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff], 0x1, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async, rerun: 32) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (rerun: 32) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f0000000240)={0xffff, 0x1ff, 0x0, 0x8, 0x36, 0xfffffffffffffffc}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r4}) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x4, @local, 0x5}, {0xa, 0x4e20, 0x9, @private1, 0x4}, 0xffffffffffffffff, 0x9}}, 0x48) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000180)={0x3f, 0x800, 0x7fffffff, 0x6, 0x1, 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:00:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xa, 0x81, 0x1f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000100)=0xb2c4, 0x2) 00:00:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0xffffffff, 0x200, 0x6}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r5}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000140)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, &(0x7f0000000180)={r7, r8, 0x8ed, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000200)={r3}) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x309080) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f0000000280)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0xffffffff, 0x200, 0x6}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000140)={0x0, 0x1, r4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, &(0x7f0000000180)={r7, r8, 0x8ed, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000200)={r3}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x309080) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f0000000280)={r3}) (async) 00:00:57 executing program 4: getrusage(0x1, &(0x7f0000000140)) (async, rerun: 64) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) 00:00:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r5}) 00:00:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0xffffffff, 0x200, 0x6}) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000140)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, &(0x7f0000000180)={r7, r8, 0x8ed, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000200)={r3}) (async) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x309080) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f0000000280)={r3}) 00:00:58 executing program 2: ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000040)={0x2000001, 0x0, 0xffffff7f, 0x0, 0x0, 0x100}) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x84800) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)) 00:00:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xa, 0x81, 0x1f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000100)=0xb2c4, 0x2) 00:00:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r5}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r5}) (async) 00:00:58 executing program 4: getrusage(0x1, &(0x7f0000000140)) (async) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) 00:00:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:00:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000080)) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:00:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff], 0x1, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f0000000240)={0xffff, 0x1ff, 0x0, 0x8, 0x36, 0xfffffffffffffffc}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r4}) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x4, @local, 0x5}, {0xa, 0x4e20, 0x9, @private1, 0x4}, 0xffffffffffffffff, 0x9}}, 0x48) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000180)={0x3f, 0x800, 0x7fffffff, 0x6, 0x1, 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:00:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000080)) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:00:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x2000000}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 00:00:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:00:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x8, 0x8000], 0x2, 0xddc5ffabde6b76a0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x2bb, 0x2], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000003c0)={0x6, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) 00:00:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000080)) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:00:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:00:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r1, 0x80000}) 00:00:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x6, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x3}, [@exit, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f}]}, &(0x7f0000000640)='GPL\x00', 0x800, 0x7d, &(0x7f0000000680)=""/125, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x9, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x64e}, 0xc) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x20000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x2, 0x30000000, 0x1000, 0x882, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0xb}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0x5, 0x8}, 0xc) r11 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r11, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x400}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0x48}]}, &(0x7f00000000c0)='syzkaller\x00', 0xfffffffc, 0xde, &(0x7f0000000240)=""/222, 0x0, 0x1a, '\x00', 0x0, 0x1a, r4, 0x8, &(0x7f0000000100)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xe, 0x4, 0x6}, 0x10, r5, r6, 0x0, &(0x7f0000000980)=[0x1, r7, r8, 0x1, r9, r10, 0xffffffffffffffff, r11]}, 0x80) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:00:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x2000000}) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 00:00:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r1, 0x80000}) 00:00:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x6, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x3}, [@exit, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f}]}, &(0x7f0000000640)='GPL\x00', 0x800, 0x7d, &(0x7f0000000680)=""/125, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x9, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x64e}, 0xc) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x20000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x2, 0x30000000, 0x1000, 0x882, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0xb}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0x5, 0x8}, 0xc) r11 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r11, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x400}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0x48}]}, &(0x7f00000000c0)='syzkaller\x00', 0xfffffffc, 0xde, &(0x7f0000000240)=""/222, 0x0, 0x1a, '\x00', 0x0, 0x1a, r4, 0x8, &(0x7f0000000100)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xe, 0x4, 0x6}, 0x10, r5, r6, 0x0, &(0x7f0000000980)=[0x1, r7, r8, 0x1, r9, r10, 0xffffffffffffffff, r11]}, 0x80) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x6, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x3}, [@exit, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f}]}, &(0x7f0000000640)='GPL\x00', 0x800, 0x7d, &(0x7f0000000680)=""/125, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x9, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x64e}, 0xc) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x20000) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x2, 0x30000000, 0x1000, 0x882, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0xb}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0x5, 0x8}, 0xc) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r11, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x400}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0x48}]}, &(0x7f00000000c0)='syzkaller\x00', 0xfffffffc, 0xde, &(0x7f0000000240)=""/222, 0x0, 0x1a, '\x00', 0x0, 0x1a, r4, 0x8, &(0x7f0000000100)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xe, 0x4, 0x6}, 0x10, r5, r6, 0x0, &(0x7f0000000980)=[0x1, r7, r8, 0x1, r9, r10, 0xffffffffffffffff, r11]}, 0x80) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:00:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r6 = openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x8}}, 0x20) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000340)={0x2, 0x0, 0x3, 0xfffffffb, 0xa00000, 0x7f, 0x8, 0x5, 0x4}) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r6, 0xc0106438, &(0x7f0000000400)={0x7ff}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x7f, 0xfffffffe, 0x7e2e68ac, 0x100, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x48) r8 = syz_open_dev$dri(&(0x7f0000000180), 0xd0a0, 0x6a41) ioctl$DRM_IOCTL_MODE_GETGAMMA(r8, 0xc02064a4, &(0x7f0000000300)={0x3, 0xa, &(0x7f0000000240)=[0x80, 0xb04, 0xdb, 0x401, 0x4, 0x1a2, 0xf976, 0x80, 0x580, 0x9], &(0x7f0000000280)=[0xb0f, 0x7, 0xbc, 0x1, 0x7], &(0x7f00000002c0)=[0x0]}) 00:00:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x2000000}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x2000000}) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async) 00:00:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:00:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x8, 0x8000], 0x2, 0xddc5ffabde6b76a0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x2bb, 0x2], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000003c0)={0x6, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) 00:00:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r1, 0x80000}) 00:00:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r6 = openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x8}}, 0x20) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000340)={0x2, 0x0, 0x3, 0xfffffffb, 0xa00000, 0x7f, 0x8, 0x5, 0x4}) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r6, 0xc0106438, &(0x7f0000000400)={0x7ff}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x7f, 0xfffffffe, 0x7e2e68ac, 0x100, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x48) r8 = syz_open_dev$dri(&(0x7f0000000180), 0xd0a0, 0x6a41) ioctl$DRM_IOCTL_MODE_GETGAMMA(r8, 0xc02064a4, &(0x7f0000000300)={0x3, 0xa, &(0x7f0000000240)=[0x80, 0xb04, 0xdb, 0x401, 0x4, 0x1a2, 0xf976, 0x80, 0x580, 0x9], &(0x7f0000000280)=[0xb0f, 0x7, 0xbc, 0x1, 0x7], &(0x7f00000002c0)=[0x0]}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f00000003c0)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x8}}, 0x20) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000340)={0x2, 0x0, 0x3, 0xfffffffb, 0xa00000, 0x7f, 0x8, 0x5, 0x4}) (async) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_SG_ALLOC(r6, 0xc0106438, &(0x7f0000000400)={0x7ff}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x7f, 0xfffffffe, 0x7e2e68ac, 0x100, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x48) (async) syz_open_dev$dri(&(0x7f0000000180), 0xd0a0, 0x6a41) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r8, 0xc02064a4, &(0x7f0000000300)={0x3, 0xa, &(0x7f0000000240)=[0x80, 0xb04, 0xdb, 0x401, 0x4, 0x1a2, 0xf976, 0x80, 0x580, 0x9], &(0x7f0000000280)=[0xb0f, 0x7, 0xbc, 0x1, 0x7], &(0x7f00000002c0)=[0x0]}) (async) 00:00:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:00:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x2b24f9b05ae0b48a, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0)=0x8, &(0x7f0000000140)=0x2) syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x490240) 00:00:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x6, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x3}, [@exit, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f}]}, &(0x7f0000000640)='GPL\x00', 0x800, 0x7d, &(0x7f0000000680)=""/125, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x9, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x64e}, 0xc) (async) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x20000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x2, 0x30000000, 0x1000, 0x882, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0xb}, 0x48) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0x5, 0x8}, 0xc) r11 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r11, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x400}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0x48}]}, &(0x7f00000000c0)='syzkaller\x00', 0xfffffffc, 0xde, &(0x7f0000000240)=""/222, 0x0, 0x1a, '\x00', 0x0, 0x1a, r4, 0x8, &(0x7f0000000100)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xe, 0x4, 0x6}, 0x10, r5, r6, 0x0, &(0x7f0000000980)=[0x1, r7, r8, 0x1, r9, r10, 0xffffffffffffffff, r11]}, 0x80) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:00:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x8, 0x8000], 0x2, 0xddc5ffabde6b76a0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x2bb, 0x2], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000003c0)={0x6, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x8, 0x8000], 0x2, 0xddc5ffabde6b76a0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x2bb, 0x2], 0x2, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000003c0)={0x6, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) (async) 00:00:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x80000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:00:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x188843) r2 = fanotify_init(0x2, 0x40000) fanotify_mark(r2, 0x8, 0x18, r1, &(0x7f00000001c0)='./file0\x00') openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000380)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000280)={"abab2b44cfecc8464ce9e4ce5800e75f", 0x0, 0x0, {0x7, 0x7fff}, {0x1, 0xffff9bce}, 0x9, [0x1, 0x40, 0x1, 0x1000, 0x4, 0x7, 0x52, 0x800, 0x9, 0x2, 0x6, 0x826, 0x7f, 0xfffffffffffffff9, 0x4210d4c3, 0x2]}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000040)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={r5, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) 00:00:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x9, 0x40, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000200)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:00:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x188843) r2 = fanotify_init(0x2, 0x40000) fanotify_mark(r2, 0x8, 0x18, r1, &(0x7f00000001c0)='./file0\x00') openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000380)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000280)={"abab2b44cfecc8464ce9e4ce5800e75f", 0x0, 0x0, {0x7, 0x7fff}, {0x1, 0xffff9bce}, 0x9, [0x1, 0x40, 0x1, 0x1000, 0x4, 0x7, 0x52, 0x800, 0x9, 0x2, 0x6, 0x826, 0x7f, 0xfffffffffffffff9, 0x4210d4c3, 0x2]}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000040)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={r5, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x188843) (async) fanotify_init(0x2, 0x40000) (async) fanotify_mark(r2, 0x8, 0x18, r1, &(0x7f00000001c0)='./file0\x00') (async) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000280)={"abab2b44cfecc8464ce9e4ce5800e75f", 0x0, 0x0, {0x7, 0x7fff}, {0x1, 0xffff9bce}, 0x9, [0x1, 0x40, 0x1, 0x1000, 0x4, 0x7, 0x52, 0x800, 0x9, 0x2, 0x6, 0x826, 0x7f, 0xfffffffffffffff9, 0x4210d4c3, 0x2]}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000040)={0x0, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={r5, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) (async) 00:00:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x2b24f9b05ae0b48a, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0)=0x8, &(0x7f0000000140)=0x2) syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x490240) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x2b24f9b05ae0b48a, 0x0) (async) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0)=0x8, &(0x7f0000000140)=0x2) (async) syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x490240) (async) 00:00:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r6 = openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f00000003c0)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x8}}, 0x20) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000340)={0x2, 0x0, 0x3, 0xfffffffb, 0xa00000, 0x7f, 0x8, 0x5, 0x4}) (async, rerun: 64) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (rerun: 64) ioctl$DRM_IOCTL_SG_ALLOC(r6, 0xc0106438, &(0x7f0000000400)={0x7ff}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x7f, 0xfffffffe, 0x7e2e68ac, 0x100, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x48) r8 = syz_open_dev$dri(&(0x7f0000000180), 0xd0a0, 0x6a41) ioctl$DRM_IOCTL_MODE_GETGAMMA(r8, 0xc02064a4, &(0x7f0000000300)={0x3, 0xa, &(0x7f0000000240)=[0x80, 0xb04, 0xdb, 0x401, 0x4, 0x1a2, 0xf976, 0x80, 0x580, 0x9], &(0x7f0000000280)=[0xb0f, 0x7, 0xbc, 0x1, 0x7], &(0x7f00000002c0)=[0x0]}) 00:00:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000480)={0x4, 0x13ef, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x80) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000000)) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r4 = openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000240)) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000600)={0x0, 0x0, r3}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x1, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000440)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r7}) 00:00:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x9, 0x40, 0x4}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000200)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:00:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x2b24f9b05ae0b48a, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (rerun: 64) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0)=0x8, &(0x7f0000000140)=0x2) (async) syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x490240) 00:00:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x103000) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000200)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000240)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:00:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x188843) r2 = fanotify_init(0x2, 0x40000) fanotify_mark(r2, 0x8, 0x18, r1, &(0x7f00000001c0)='./file0\x00') openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000380)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000280)={"abab2b44cfecc8464ce9e4ce5800e75f", 0x0, 0x0, {0x7, 0x7fff}, {0x1, 0xffff9bce}, 0x9, [0x1, 0x40, 0x1, 0x1000, 0x4, 0x7, 0x52, 0x800, 0x9, 0x2, 0x6, 0x826, 0x7f, 0xfffffffffffffff9, 0x4210d4c3, 0x2]}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000040)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={r5, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x188843) (async) fanotify_init(0x2, 0x40000) (async) fanotify_mark(r2, 0x8, 0x18, r1, &(0x7f00000001c0)='./file0\x00') (async) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000280)={"abab2b44cfecc8464ce9e4ce5800e75f", 0x0, 0x0, {0x7, 0x7fff}, {0x1, 0xffff9bce}, 0x9, [0x1, 0x40, 0x1, 0x1000, 0x4, 0x7, 0x52, 0x800, 0x9, 0x2, 0x6, 0x826, 0x7f, 0xfffffffffffffff9, 0x4210d4c3, 0x2]}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000040)={0x0, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={r5, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) (async) 00:00:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000480)={0x4, 0x13ef, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x80) (rerun: 32) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0]}) (rerun: 64) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000000)) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r4 = openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) (async) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000240)) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000600)={0x0, 0x0, r3}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x1, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000440)={r8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r7}) 00:00:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8eb01001800000000008a801bdb1fd4bddda000000200"/33], &(0x7f00000001c0)=""/184, 0x1a, 0xb8, 0x1}, 0x20) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:00:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x9, 0x40, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000200)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x9, 0x40, 0x4}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000200)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) (async) 00:00:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x2000000, 0x1, 0xd4c4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000180)={r1}) 00:00:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x103000) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000200)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000240)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x103000) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000200)={r8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000240)={r8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) (async) 00:00:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8eb01001800000000008a801bdb1fd4bddda000000200"/33], &(0x7f00000001c0)=""/184, 0x1a, 0xb8, 0x1}, 0x20) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8eb01001800000000008a801bdb1fd4bddda000000200"/33], &(0x7f00000001c0)=""/184, 0x1a, 0xb8, 0x1}, 0x20) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:00:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x2000000, 0x1, 0xd4c4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000180)={r1}) 00:00:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x9, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r4, 0xc00864c0, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:00:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000140)={0x0, 0x0, "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", "346c5f21e3cd4ede0fe5eb28055cadb1e2c81dc49fdaf2b6e01059d0b34f29d239be26f744a40975b5490ff223dfa48d68be127a7b628bc7cdd8599a6eb5f7b688cc693b87c2e7f698abac565293dcebc41308a4652e2e8bedbcbc7121b4b2d90f6560ab8e6aa86be07a250c2b321cfc81564790c84fe98043ad64aa7484ecb6229d69908f27e7b4d581c94ae2f4c59f4f1915684a50b69fa2b2d5116d568ed6c6ed7b9c26bc5afe491146bea85ad02f027a3a27df804f49a5decf3f81d94fede76144e1f7a80299f4f8a8f92dfb5771e7fe05539f95886e6554ece43d91502b299571baf71317da607896c02936d2fb46721b4a6e2a6c7cad8f11dfc71310d66f1bf291e3e1e2351bed04a1449731cb69f297922ddaaa4503dc1d1fbfa4e296b2899574e53adad936d7dc1ea1bf56a29b8209923fd9c6bffade8bfc7e73155b6d43d5293bacbd4e4b03cb352cc385b6da42a54871e4474f1c027f6624276d4fd86c4f4203dc4c8dbf458a2903c0b12de0cf924af4b9809c2868e9248260a151a94a5ce15735957bbb03a1aa44d2b4a9ed6894ffaeed0ad3de19870e65b424eaf76109c97220487473d08bbd69152e931eda2c7fd043a975a529aebec58f4b10d6bfce382bc6e186be96532001b3305faddf81d71c6cc4900b0f9dc166483107a7e396dbb125ebad371194f2536d2fb672d88d66cae1c9b4b3d027beb5dc4effe97ed8c4bf8854db926f92e53bfdf3a507b3499cc90a58f1a5c34aa20aafc619c14777a8c9df4f30f8d24f761c4bcc9a91fcac8970ef863092586832afbc0546bcc8b26f2298a79cd730c306b56a517b23568fc586134feeecfe9a737f3afeb9233a638916bfc35635072b84c3d1d84f17f530ee1cf5932c9e18163e792c93ebec07c7d6eefe2e36e5375a0d0327ed0a0fbcc5d843e3fd6253159e105f3b893d7556a41cc196e4a37e8b6fdaa141a0e8feff066ff7a0ab36312f42ad711cee3df97e85baea78ae8af0cb35d9f1e18ccc671e509687144725342241c7a5ed6a53fc167010fe04219912d55a7fb62be88021bc4ce02b67c58d600c230248e243f6a3ed75b42225df12c6fa8fd019850c507a24a6b8440ed1fab962af13bf8bebda064c944044cca44de94dbc779d6120ae18c79b173d514db484e5b78c086d76f63002b7a49c87c9e7a82819926882b74bb8d71321998e15552be90f8b19c540c19616e773a669486adcf09fde0bb10668acbacd9163c005c6335226ea28a5688ad9ac691529f6cfc9047a36b8fdd0cf2e6ef59906b0b4be28157033d98118835b4de5e50184013248651f4acbd4e4f1647f1b9f150009e600a5fdf293010e9078544d42094b432d6b7bbb58466d224acf0d8bc97a736b14d7f2daefb83a92323617c3ffa7cc1c8f0329d6cc85995a9657bc90161ffd08d700b39ae3bf34da16dfe22b85be0073dc385eecc98c17777661d0d06d46f8cc9a843b74b954606496e310485cd17e269590900c83b0c7f0ea98ba8723b1ad095caf5c870f23c0ce69c892aea24c3c29fe84c619d70afa3824e9cfbe688285663c7db7d0e7ce6fb682a1ca919bd3aaed69a7c5bece4b890c6a4875e0b2b17eff5bed2e2692aa8ed2cac8af24639670b2f0fd9982c94235f540f9878635da04b02761216dade67402168bf72064bb9e57519559d976e943d294a7b1ddab6c14d3ef1f460093ca06d39e149ee3a4b5d5c3601b07d182b565da5ea86d853c5effde70cb8391f9d272010e36d6d462b778a2a1fa0f4de7f3e0289c42f2dd9b438bc97fe318c7e62cc123970bae60acd8b5e1ab568b22748401d4c314dfe89a7d5eacaa0d67a0993aa906b46fe0568a58bea7578b4f714eaa35ec31fd0260dfe4e6c64cc9b3d2d3299d3243e6af2a9721b5cfa36f84b706c54ea84f8a85de8fcdb402b75f91e91b20ed3e2fc8d745728ba76578027747a000547c07fcc67149e0e27ce7220974d28ed675e771940920f67d224c453beb9e300caf80e28f4b3ba0e7be6774e3500fd1b0acec71fc3f2ad262ce97cf8a3bff16682c4ecf630a42fe4ab3ad7d7f696590af83932bbd985152d65d3ecc0fe6df9f7b0c3b4bcf6c740876da8a936d2dbcab5bcd653755d79b6655cea87446ba49f7a2422f7c2b70da126c37cbb66b4227690c6383ea28d8df2044bd12e5026392bb10b28716274e76ade19be151537db67593914c186221f2e5c08c1725c9c0e7075df3d5c2faa9d0fec3d37e49653f2a883d672248c10208ab0175c9759f7f576d833389ff76c54a952a8ccf560968773ba0648831b50a9c8f41903a164b5b763397639f0098448b6b5742e9b476309b0064ea5f17452242c806770c782f8d249a7ec00da2f8b7bbce00dad2a9cc4a0e5efe75771290329778cae6432d8ebb5b090ad495bb2f64c1b0389f4c4f9f71096fcceace1960fedeececb35b723b4eb4ee9d19cc080b6f49cf51314b6cf2a2906d7145d5eb703202e5bb66d823163670f2a19cc7ecbd8ab2a0167c2fcae1f4a1befab9cd269d902c796abdcc2490e12c6a3ba00b35c8d345f4f434dc59e5962d988eafc726f9cc044b7042b6e922d6331b4ff13aba9d9e80f1c431589bb7c3935a086c29ac965d6149a065ce8d974c320ab1d9a915265d4593758059e23c86ab18911a3f3860239dff77d5e25a797eec780f6379681a5087fb3ceb9ea2b7e496203a4cd28056229d4a12aecd3926c5dbd0ec96e861772407288e5241bf4a03b6c2ccc1a7bccd90d9709da3495760d3105c074e00fcf120004b7b8145d517aadb4848399c6c00a2ef6915b1a1c49740725decd4e7948aa9dec068d3d665e70edc8a64848b60122c66c6f29e76865790d39d1cf2276536acd3eaa322dbbb742608209e8d0dc32ce85d146eae4cb905e10a09eb49893131df8f762d173a4c8df572dbeecfcbc8cd19251b513200ec40c435a9a5c9fb97926ed57a25fbd52316de818ee9b5298f913804d6bf6da59f5601ba369c38e9551c716fce806c1c39d0beb63e6e35c4d1ed057d8a5087665c45cf41bccb18316786d7d07e9a592736d82ff3800a5c7bdb8a0c364888531167629eebf4130f0ecd2a2621611e91f83379504d18380edea96480d0089e57c7e13fa27039f556c11d81172603fd6cf953bfd80eb0c19080b6078daf42dcb59790308edd73abe83934b18b0d47acfe6518f53240d7484beb2cb7cd72e538754c05f20ba85a4b71278418cefa66a0c54742d166efd2129304b897cd259ed1e7506976cf3012f534483c28ed9896b3bbfeec2b0e51d7f3b962e92f0fcc7b2a888a769a42e40ff5bad8d73717e9774c9c9ff38fd032a6ee7ab56bc9955390e0fe1fec5a87d1232ab0a1e61a43d81b53ee378793f7bfb5ef6a5e86e648eada8c4d90ac1bfc29f1df796a8da532fa71bf2ce04bf27367cf6c933e2b348a2240c05042490d0b4b43714417187a0bfdfb79e1eec82af5f8f4603dbca52b8c6fc2c7ec1e8f80ab5afff2e2230506a9134589f8390467ebbb0154358e22411e169dd9dfc773d1ac511e133bf89a068f89eb2e7a584f75c6af18c07e6890574fd61ff57a388bded0032d6d30ad6350bef6003879359608a9cd741cf22ef414f13e970aea1ca816e1c3f720138ff6d89819a02016bc68135217784b92a148de1857ad47557f952c9d6c3dabda4eed930ed0344e00ed718476cd4894801beb039ededc16c323f784626e4e9816dfeb179d7ff7b3bbb9931262a86fb03874cdce775847c9a0a83c689d00abfe789b906575bf17f2c7991ea18dd718c1ab4137a6cb4e4ba4c0192010271c0d99672ad0990905483c967459288f9a34f89ad3a8517fe1bc681f8045c9e52c942c4992d8169a5bf02ee325ef4e36eac934b6b4110b833463ccef547fd3a9a8861a859d14f9119db0f700169fa2c52c5b7b8e1683a73cd7123f3fe1baed61bac227ce4c93b679b0f4b0edadb1dc2be83c3c4cd911e320c69458005a753979e2c3cbde10af0b3bf53b04043ddb8125918487a0c9978488daf556b8a7ecf7f1c5c36085c753d4eb5f03acad6e74c76d75b589970605ba05f308aa9b05e07d2dd118b9bb0433b9fd057ea15e06f45d743480e29dcf77b93c3b50de0425306243759da4f8749cbb660e0c02c88cd34bba74f4656162caa032f0e9a07c3e3360869dcdd39a82794f90429ae844b3a8f142ce0b874ed2f465ed99e5465b83cfe1fab2c4e59a81edec2a9a34ab9fa6133c899a1bfe8bd079210175e83dbf9040ec7828c9429e43594405f5f390ad3b47f33b79141958b1d19f1b525e01394a23abee089da092a7918ea43751f32e070cb0e5551b00e4747720263b77e0cf7d2d5d362bda1e5f51e0bbf665508d9204c260f47b36f9590051ce21d8cf1bcb770e87d243a4bf803bd0260d74086fae071cb3a6098541c9151ea2ab0b547ee4394c44cb9ae2e536fa57c3b1062b82df320d894ba1ed0be7b01925f8950f69be061cd5206b54947293a80fd3dc5b679b6c388379bbc130454153b513145661815db971b8f720cfb34ef5d971663fe98eeec2aa2ece314dee8686182d6d595d0c3b380a5f916621673ae991e5e54ca100ee9632896962fc5a685065457164d553db0fb13d3498949a1c36eee11967afd6de32cdc491e97584d6ea2592519ab4a9ce4b6f1049127b44294adaa4648ef5769373b245230138743bf8106f61a0717373d1f1dc79826592bd8b127b16695b05becc6347ff5f91d2715d64f05a323fe112d86c087a95bc966ef9636cd2cfd0326b1ad3b42dbf33d603e20dfd1fb4485169f47d6e6931548e5ccc98529fbb422b9615782d07d62ebf48de778a455f2bdd546b866c0e6dcb1c97bb541a349913a699884167a5f2f55e091731e9c832130e88642a483c1b46f798163f1417c003d0f62527e66d80b7d6b809fbcc7910daef6e6bf07b4787ed522140841dac0fb7630099ac3fe07304f1def325cd36c350c73150d9a7270e5a71f724b77351742c622727c9263199f9f765bc68decab9e4ee0a3fb86b916484f8fd257b682d3ade6751bf8e3d1bd0614d388f38738aaae97945746d640a089bb9612822aba40d3f1887b05a8cf8780d350bde8c87635429eb46aa458b1142fed52cb56259e3ebdf7a290613e51d94ee6d670d15b5cbd3091a551608dc51ce51da679286454f13e2505d19d9d3896915c9057cf3d3ca808bc058f34ca3072536809f04d4dddad3f2309fb55f01a208c6cc6e66dd2dea50658ab5215a850b6573302e2f25a6f238e01a2a3b0b33ce7ee55c163bc14a6995a53d1d3af0c1c952b7b12d7cba01f8fcf00cfcf8b79269526f9d6b4739192c15cdbe80d6b9179374e59799edc702289d5fbdffb4ca956857539cc4ac37cbc9b3f68a1b99dfc147014d48ec3e"}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) 00:00:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000480)={0x4, 0x13ef, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x80) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000000)) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r4 = openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000240)) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000600)={0x0, 0x0, r3}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x1, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000440)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r7}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000480)={0x4, 0x13ef, 0x8}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x80) (async) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0]}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000000)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000240)) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000600)={0x0, 0x0, r3}) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x1, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000440)={r8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r7}) (async) 00:00:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x2000000, 0x1, 0xd4c4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000180)={r1}) 00:00:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x9, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r4, 0xc00864c0, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x9, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r4, 0xc00864c0, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) (async) 00:00:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000140)={0x0, 0x0, "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", "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"}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) 00:00:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8eb01001800000000008a801bdb1fd4bddda000000200"/33], &(0x7f00000001c0)=""/184, 0x1a, 0xb8, 0x1}, 0x20) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:00:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x103000) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) (async) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000200)={r8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000240)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:00:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x2, 0x10800) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000480)) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r4) unlinkat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x200) r5 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="5f78f19fd0d98d7646f22b26c97bc9a6af8edbe166bb9284ab7a6f049e61039fb6bbdabfccf422234b9e09760ed211d46d891b32be5105da6a04b46c4a57c2647f8b3049773c2098fd8be42fbc7cae15b3f1468ac36c16a9d92d187e959cadc044f13dc7b7ae6d8d", 0x68, 0xfffffffffffffff9) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f00000003c0)={0x2, 0x5, 0x3, 0x43, 0x8, 0x68e, 0x6577, 0x7fffffff, 0x3}) r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="14", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000540)={0x0, r6}, 0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={'sha3-224\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000180)={r5, 0x0, r6}, &(0x7f0000000240), 0x0, &(0x7f0000000380)={&(0x7f0000000280)={'cbcmac-aes-ce\x00'}, &(0x7f00000002c0)="64372d0679a725db5b1ea63d580264bff6d4f8c6579f665f927ebdc92aac767b17bab8a80b2084d6eec73aedca26f2f3caf9055b87654dca1f4e085ae179f2f5774c14a18af385e38440ba0cd07496ed2e4acababb2e40e2e26938857552cedc4a54c85bd31dac812ff04208ef5519cea2d291631bcb14b6dd40756aedb7e452a320a76ceca4487c34d35e3c", 0x8c}) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)) 00:00:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x9, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r4, 0xc00864c0, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:00:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000140)={0x0, 0x0, "cdd4d972eda83b3a5e771d5e3458ce6d919ffd7b07bf2ce9492b16f3bd876efe76346f35adc90599c76c45923bc0f446995e2fbc3746f7961e5de3eb294305441ad22f255812f0b309d6f8bdd32ed8e757a7d70548133f04331ced1aa6e09c7806e7f040a6bd53fd03e6613775f17551c132560fbff71f923b751b8e711ba4186c1b36b035fb97d55d865525c8ac40056e309e6547aff7f410e9b59dd96faf27f4b3172cee3866a8741a2a6f15c102d35c35df9431442ea93827770f6fa85c9e686a2ee7f5dd841036b17486b2ce7259fd8c28b8fa4a23f3fc094c56b8229156911a46ef192d30658f59ced51836e57bb9ebdd66c7e84cef5dd7a2319db297a8", "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"}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) 00:00:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x3, @empty, 0x8001}}}, 0x30) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x7f, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) 00:00:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x800) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r7 = openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000300)='GPL\x00', 0x7ee4, 0x69, &(0x7f0000000340)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000400)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x0, 0xfff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r5, r6]}, 0x80) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000540)={@desc={0x1, 0x0, @auto="77f8a42d68e473f7"}}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r7, 0xc00464c9, &(0x7f0000000580)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000080)=""/21, 0x15, 0x0, &(0x7f00000000c0)=""/203, 0xcb}}, 0x10) 00:00:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x50000) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) 00:00:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x2, 0x10800) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000480)) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r4) (async, rerun: 64) unlinkat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x200) (async, rerun: 64) r5 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="5f78f19fd0d98d7646f22b26c97bc9a6af8edbe166bb9284ab7a6f049e61039fb6bbdabfccf422234b9e09760ed211d46d891b32be5105da6a04b46c4a57c2647f8b3049773c2098fd8be42fbc7cae15b3f1468ac36c16a9d92d187e959cadc044f13dc7b7ae6d8d", 0x68, 0xfffffffffffffff9) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f00000003c0)={0x2, 0x5, 0x3, 0x43, 0x8, 0x68e, 0x6577, 0x7fffffff, 0x3}) (async) r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="14", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000540)={0x0, r6}, 0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={'sha3-224\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000180)={r5, 0x0, r6}, &(0x7f0000000240), 0x0, &(0x7f0000000380)={&(0x7f0000000280)={'cbcmac-aes-ce\x00'}, &(0x7f00000002c0)="64372d0679a725db5b1ea63d580264bff6d4f8c6579f665f927ebdc92aac767b17bab8a80b2084d6eec73aedca26f2f3caf9055b87654dca1f4e085ae179f2f5774c14a18af385e38440ba0cd07496ed2e4acababb2e40e2e26938857552cedc4a54c85bd31dac812ff04208ef5519cea2d291631bcb14b6dd40756aedb7e452a320a76ceca4487c34d35e3c", 0x8c}) (async) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)) (rerun: 64) 00:00:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x80000000}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:00:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x3}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x480400, 0x84) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000000c0)=0x1, 0x4) 00:00:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x800) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r7 = openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000300)='GPL\x00', 0x7ee4, 0x69, &(0x7f0000000340)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000400)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x0, 0xfff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r5, r6]}, 0x80) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000540)={@desc={0x1, 0x0, @auto="77f8a42d68e473f7"}}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r7, 0xc00464c9, &(0x7f0000000580)) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000080)=""/21, 0x15, 0x0, &(0x7f00000000c0)=""/203, 0xcb}}, 0x10) 00:00:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x3, @empty, 0x8001}}}, 0x30) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x7f, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) 00:00:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x50000) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x50000) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) 00:00:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x3}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x480400, 0x84) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000000c0)=0x1, 0x4) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x3}) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x480400, 0x84) (async) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000000c0)=0x1, 0x4) (async) 00:00:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000100)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x80000000}) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (rerun: 32) 00:00:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x2, 0x10800) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000480)) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r4) unlinkat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x200) r5 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="5f78f19fd0d98d7646f22b26c97bc9a6af8edbe166bb9284ab7a6f049e61039fb6bbdabfccf422234b9e09760ed211d46d891b32be5105da6a04b46c4a57c2647f8b3049773c2098fd8be42fbc7cae15b3f1468ac36c16a9d92d187e959cadc044f13dc7b7ae6d8d", 0x68, 0xfffffffffffffff9) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f00000003c0)={0x2, 0x5, 0x3, 0x43, 0x8, 0x68e, 0x6577, 0x7fffffff, 0x3}) (async) r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="14", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000540)={0x0, r6}, 0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={'sha3-224\x00'}}) (async) keyctl$dh_compute(0x17, &(0x7f0000000180)={r5, 0x0, r6}, &(0x7f0000000240), 0x0, &(0x7f0000000380)={&(0x7f0000000280)={'cbcmac-aes-ce\x00'}, &(0x7f00000002c0)="64372d0679a725db5b1ea63d580264bff6d4f8c6579f665f927ebdc92aac767b17bab8a80b2084d6eec73aedca26f2f3caf9055b87654dca1f4e085ae179f2f5774c14a18af385e38440ba0cd07496ed2e4acababb2e40e2e26938857552cedc4a54c85bd31dac812ff04208ef5519cea2d291631bcb14b6dd40756aedb7e452a320a76ceca4487c34d35e3c", 0x8c}) (async) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)) 00:00:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x800) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r7 = openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000300)='GPL\x00', 0x7ee4, 0x69, &(0x7f0000000340)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000400)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x0, 0xfff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r5, r6]}, 0x80) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000540)={@desc={0x1, 0x0, @auto="77f8a42d68e473f7"}}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r7, 0xc00464c9, &(0x7f0000000580)) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000080)=""/21, 0x15, 0x0, &(0x7f00000000c0)=""/203, 0xcb}}, 0x10) 00:00:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x3, @empty, 0x8001}}}, 0x30) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x7f, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x3, @empty, 0x8001}}}, 0x30) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x7f, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) (async) 00:00:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x50000) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (rerun: 64) 00:00:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000100)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x80000000}) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:00:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x3}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x480400, 0x84) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000000c0)=0x1, 0x4) 00:00:59 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x100) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000000c0)={@none, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:00:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x4003) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r7, 0x0, "28a5f8", "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"}}, 0x110) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {&(0x7f0000000280), r7, r8}}, 0x18) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffff9, 0x608601) ioctl$DRM_IOCTL_GEM_CLOSE(r9, 0x40086409, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}) 00:00:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) 00:00:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f00000001c0)={0x0, 0x0, 0x571, 0x1693, 0xfffffffd, 0x40000}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) getpeername$ax25(r1, &(0x7f0000000140)={{0x3, @rose}, [@bcast, @default, @remote, @rose, @rose, @default, @default, @default]}, &(0x7f00000000c0)=0x48) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000080)={0x0, 0x7, 0x100, 0x8, 0x40, 0x0, 0xd7c, 0x16, 0x9, 0x2, 0x1f, 0xb6}) 00:00:59 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r1 = openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@nfs={0x90, 0x24, {0xe8f, 0x3, 0x6, 0x80, "4257b6e0ea507343acaf14020cd3914ced6759d23e5eb4d4d20582ca2f3abc8acc73f405c5ccba37dc356c053a7616f45d723a5417043421ce376fb97f7675d82dbbaeaae62d14ece8a5392303e5391b196c477ec1362ce3cf260efb7f2347dbaf896ad6cc7f05defac74f120b278ac284c84c9f9ee5bd60a7a3ebf240279133"}}, &(0x7f0000000180), 0x400) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000002c0)={r6, r7, 0x101, 0x1000, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:00:59 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x100) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000000c0)={@none, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000001c0)={r3}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x100) (async) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000000c0)={@none, 0x7}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:00:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x383241) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000080)) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x7, 0x8}, 0xc) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r7 = openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x6, 0x5], 0x2, 0xc00, 0x0, 0xffffffffffffffff}) r9 = openat$incfs(0xffffffffffffffff, &(0x7f0000000340)='.pending_reads\x00', 0x20041, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0x8, 0xfffffffffffffff0}]}, &(0x7f0000000100)='syzkaller\x00', 0x10000, 0x8, &(0x7f0000000140)=""/8, 0x41000, 0x18, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x8, 0x200, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[r4, r5, 0x1, r6, r8, 0x1, r9]}, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x6, 0x8b, 0xffffffc1], 0x3, 0x0, 0x0, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xa, 0x12, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1000}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @generic={0x0, 0x3, 0x4, 0x9000, 0xffffe5ef}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @exit, @exit, @cb_func={0x18, 0xc, 0x4, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb1000000}]}, &(0x7f0000000580)='syzkaller\x00', 0x5828e1de, 0x1000, &(0x7f00000005c0)=""/4096, 0x40f00, 0xc, '\x00', 0x0, 0x18, r9, 0x8, &(0x7f00000015c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001600)={0x4, 0xa, 0xf6, 0x3f}, 0x10, 0xffffffffffffffff, r8, 0x0, &(0x7f0000001640)=[r8, r9, r8, r8, r5, r6, r9, r4, r4]}, 0x80) ioctl$TUNSETFILTEREBPF(r10, 0x800454e1, &(0x7f0000001700)=r11) 00:00:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x4003) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r7, 0x0, "28a5f8", "c6d5c7989c0226030e2a519d433172399c086787ea48bead1675199df6ce8eb10caeb3c032f8b332b2afc0db5a54731c7d561927c04e4e26e37e1475f810d7a48846f12cc2f59f5f236d055e49ffc794483fcf62109c0fb8ca70dfdb0ec6aaaac17d3f230f315e379550799910e5a0d7f690500669464b50fef8547142effae795f48e735b6f39b83bedafac3cf4c36bf263651b0a7a7418c19b5910864911d186e1fde3e0062c3a1139d8b3b4d999aae758e7be95714d053531b6c5d5ffd9681bffdf52550000471d3abc31a4e44e555316e3bcd9f1ab681174ea38d1fbac0f393b190f1161f344745cb93dac101fe15c68bda62b113eed7ed3c8108a2c4002"}}, 0x110) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {&(0x7f0000000280), r7, r8}}, 0x18) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffff9, 0x608601) ioctl$DRM_IOCTL_GEM_CLOSE(r9, 0x40086409, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x4003) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{}]}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r7, 0x0, "28a5f8", "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"}}, 0x110) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {&(0x7f0000000280), r7, r8}}, 0x18) (async) syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffff9, 0x608601) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r9, 0x40086409, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}) (async) 00:00:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) 00:00:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f00000001c0)={0x0, 0x0, 0x571, 0x1693, 0xfffffffd, 0x40000}) (async) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) (async, rerun: 64) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (rerun: 64) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) getpeername$ax25(r1, &(0x7f0000000140)={{0x3, @rose}, [@bcast, @default, @remote, @rose, @rose, @default, @default, @default]}, &(0x7f00000000c0)=0x48) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000080)={0x0, 0x7, 0x100, 0x8, 0x40, 0x0, 0xd7c, 0x16, 0x9, 0x2, 0x1f, 0xb6}) 00:00:59 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r1 = openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@nfs={0x90, 0x24, {0xe8f, 0x3, 0x6, 0x80, "4257b6e0ea507343acaf14020cd3914ced6759d23e5eb4d4d20582ca2f3abc8acc73f405c5ccba37dc356c053a7616f45d723a5417043421ce376fb97f7675d82dbbaeaae62d14ece8a5392303e5391b196c477ec1362ce3cf260efb7f2347dbaf896ad6cc7f05defac74f120b278ac284c84c9f9ee5bd60a7a3ebf240279133"}}, &(0x7f0000000180), 0x400) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000002c0)={r6, r7, 0x101, 0x1000, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:00:59 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x100) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000000c0)={@none, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000001c0)={r3}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x100) (async) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000000c0)={@none, 0x7}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:00:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x383241) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000080)) socket$bt_cmtp(0x1f, 0x3, 0x5) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x7, 0x8}, 0xc) (async) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r7 = openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x6, 0x5], 0x2, 0xc00, 0x0, 0xffffffffffffffff}) (async) r9 = openat$incfs(0xffffffffffffffff, &(0x7f0000000340)='.pending_reads\x00', 0x20041, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0x8, 0xfffffffffffffff0}]}, &(0x7f0000000100)='syzkaller\x00', 0x10000, 0x8, &(0x7f0000000140)=""/8, 0x41000, 0x18, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x8, 0x200, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[r4, r5, 0x1, r6, r8, 0x1, r9]}, 0x80) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x6, 0x8b, 0xffffffc1], 0x3, 0x0, 0x0, 0xffffffffffffffff}) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xa, 0x12, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1000}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @generic={0x0, 0x3, 0x4, 0x9000, 0xffffe5ef}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @exit, @exit, @cb_func={0x18, 0xc, 0x4, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb1000000}]}, &(0x7f0000000580)='syzkaller\x00', 0x5828e1de, 0x1000, &(0x7f00000005c0)=""/4096, 0x40f00, 0xc, '\x00', 0x0, 0x18, r9, 0x8, &(0x7f00000015c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001600)={0x4, 0xa, 0xf6, 0x3f}, 0x10, 0xffffffffffffffff, r8, 0x0, &(0x7f0000001640)=[r8, r9, r8, r8, r5, r6, r9, r4, r4]}, 0x80) ioctl$TUNSETFILTEREBPF(r10, 0x800454e1, &(0x7f0000001700)=r11) 00:00:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) 00:00:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x0, 0x0, 0x4000000}) 00:00:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f00000001c0)={0x0, 0x0, 0x571, 0x1693, 0xfffffffd, 0x40000}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) getpeername$ax25(r1, &(0x7f0000000140)={{0x3, @rose}, [@bcast, @default, @remote, @rose, @rose, @default, @default, @default]}, &(0x7f00000000c0)=0x48) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000080)={0x0, 0x7, 0x100, 0x8, 0x40, 0x0, 0xd7c, 0x16, 0x9, 0x2, 0x1f, 0xb6}) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f00000001c0)={0x0, 0x0, 0x571, 0x1693, 0xfffffffd, 0x40000}) (async) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) getpeername$ax25(r1, &(0x7f0000000140)={{0x3, @rose}, [@bcast, @default, @remote, @rose, @rose, @default, @default, @default]}, &(0x7f00000000c0)=0x48) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000080)={0x0, 0x7, 0x100, 0x8, 0x40, 0x0, 0xd7c, 0x16, 0x9, 0x2, 0x1f, 0xb6}) (async) 00:00:59 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r1 = openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@nfs={0x90, 0x24, {0xe8f, 0x3, 0x6, 0x80, "4257b6e0ea507343acaf14020cd3914ced6759d23e5eb4d4d20582ca2f3abc8acc73f405c5ccba37dc356c053a7616f45d723a5417043421ce376fb97f7675d82dbbaeaae62d14ece8a5392303e5391b196c477ec1362ce3cf260efb7f2347dbaf896ad6cc7f05defac74f120b278ac284c84c9f9ee5bd60a7a3ebf240279133"}}, &(0x7f0000000180), 0x400) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000002c0)={r6, r7, 0x101, 0x1000, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000001c0)={r5}) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@nfs={0x90, 0x24, {0xe8f, 0x3, 0x6, 0x80, "4257b6e0ea507343acaf14020cd3914ced6759d23e5eb4d4d20582ca2f3abc8acc73f405c5ccba37dc356c053a7616f45d723a5417043421ce376fb97f7675d82dbbaeaae62d14ece8a5392303e5391b196c477ec1362ce3cf260efb7f2347dbaf896ad6cc7f05defac74f120b278ac284c84c9f9ee5bd60a7a3ebf240279133"}}, &(0x7f0000000180), 0x400) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000280)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000002c0)={r6, r7, 0x101, 0x1000, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000001c0)={r5}) (async) 00:00:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x4003) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{}]}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r7, 0x0, "28a5f8", "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"}}, 0x110) (async, rerun: 64) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {&(0x7f0000000280), r7, r8}}, 0x18) (async) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffff9, 0x608601) ioctl$DRM_IOCTL_GEM_CLOSE(r9, 0x40086409, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}) 00:00:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x383241) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000080)) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x7, 0x8}, 0xc) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r7 = openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x6, 0x5], 0x2, 0xc00, 0x0, 0xffffffffffffffff}) r9 = openat$incfs(0xffffffffffffffff, &(0x7f0000000340)='.pending_reads\x00', 0x20041, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0x8, 0xfffffffffffffff0}]}, &(0x7f0000000100)='syzkaller\x00', 0x10000, 0x8, &(0x7f0000000140)=""/8, 0x41000, 0x18, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x8, 0x200, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[r4, r5, 0x1, r6, r8, 0x1, r9]}, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x6, 0x8b, 0xffffffc1], 0x3, 0x0, 0x0, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xa, 0x12, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1000}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @generic={0x0, 0x3, 0x4, 0x9000, 0xffffe5ef}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @exit, @exit, @cb_func={0x18, 0xc, 0x4, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb1000000}]}, &(0x7f0000000580)='syzkaller\x00', 0x5828e1de, 0x1000, &(0x7f00000005c0)=""/4096, 0x40f00, 0xc, '\x00', 0x0, 0x18, r9, 0x8, &(0x7f00000015c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001600)={0x4, 0xa, 0xf6, 0x3f}, 0x10, 0xffffffffffffffff, r8, 0x0, &(0x7f0000001640)=[r8, r9, r8, r8, r5, r6, r9, r4, r4]}, 0x80) ioctl$TUNSETFILTEREBPF(r10, 0x800454e1, &(0x7f0000001700)=r11) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x383241) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000080)) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x7, 0x8}, 0xc) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x6, 0x5], 0x2, 0xc00}) (async) openat$incfs(0xffffffffffffffff, &(0x7f0000000340)='.pending_reads\x00', 0x20041, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0x8, 0xfffffffffffffff0}]}, &(0x7f0000000100)='syzkaller\x00', 0x10000, 0x8, &(0x7f0000000140)=""/8, 0x41000, 0x18, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x8, 0x200, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[r4, r5, 0x1, r6, r8, 0x1, r9]}, 0x80) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x6, 0x8b, 0xffffffc1], 0x3}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xa, 0x12, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1000}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @generic={0x0, 0x3, 0x4, 0x9000, 0xffffe5ef}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @exit, @exit, @cb_func={0x18, 0xc, 0x4, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb1000000}]}, &(0x7f0000000580)='syzkaller\x00', 0x5828e1de, 0x1000, &(0x7f00000005c0)=""/4096, 0x40f00, 0xc, '\x00', 0x0, 0x18, r9, 0x8, &(0x7f00000015c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001600)={0x4, 0xa, 0xf6, 0x3f}, 0x10, 0xffffffffffffffff, r8, 0x0, &(0x7f0000001640)=[r8, r9, r8, r8, r5, r6, r9, r4, r4]}, 0x80) (async) ioctl$TUNSETFILTEREBPF(r10, 0x800454e1, &(0x7f0000001700)=r11) (async) 00:00:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080)=0x7, 0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:00:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x0, 0x0, 0x4000000}) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x0, 0x0, 0x4000000}) (async) 00:00:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080)=0x7, 0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0x3}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080)=0x7, 0x4) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:00:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x2, 0x64) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000100)={0x0, r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:00:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x0, 0x0, 0x4000000}) 00:00:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000000)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x0, 0x20, 0x80000000}) 00:00:59 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000240)={0x0, 0x0, "cd17a5afd473c5558b13e0410ccff1aa286f73e5f3b3b5adb4f8dc90100c0da5b07b20704a05e61e374df6a402ffea559a21bb0a220456bb743420a17632fedd032cccc7bb18843aa0d8889aedda0bd49ff2afc8d0f9483e5f43b45971fceb3f6b391aaf17fa0db99af607ff44af9fde99d501d1d10c40815491c7c8e70fc7d18623873a0777b34052e20170de382dcbdb005c9576af439912135c48df147936be06037505ba9dd55c7901cbb1968d5fce7d60c26819823fd1948170736b92752c0dcba8e2c7fcea158d74e7d8b2b71b22a9c38f1d152efac6c0aa2e65c370fa6c262d2ec5a4158e280b62424df71fd8072f23630f440a90d0a39870607f23c0", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001240)={r1, 0x0, "2d8342631fe36f91f984fca45eeaabedef2ffb3cdc9a165e68b775bc61ecbe91fedfc12e0786daf674ff6029cd027ea5098f89ecd304d2b1c276fcd6365b159ef6bc715580ec79819b46a17e07043134e1a345066fc33621da20dcefb7208fb3064b16ef59e460d5b21b611d00193dcd3d6cef563bad99b3ca1b54beef57ec3edff8b1afce75b35d6dc9a5e0b0f49f8600df28a492fdeff90c989d0e0a9cba44d1899bf21d5b7a1d19e64003f9989971aa6ee103e506683badc194fa6baadb0f277430a1e352694ece02a560a4a48cc59f9df8a8c7fa0f1ac7ce1545c847b66fa192c0e9b7274ce2538f694421e61824597741a7a254202bcdb608c344364351", "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"}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:00:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x2, 0x64) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000100)={0x0, r4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:00:59 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x26, 0x221280) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x0, 0x855, 0x80080002, 0x40, 0x1000, 0x0, 0x0, 0x840004}) 00:00:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000000)) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x0, 0x20, 0x80000000}) 00:01:00 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000240)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001240)={r1, 0x0, "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", "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"}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:01:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080)=0x7, 0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0x3}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080)=0x7, 0x4) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000000)) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x0, 0x20, 0x80000000}) 00:01:00 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x26, 0x221280) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async, rerun: 64) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (rerun: 64) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x0, 0x855, 0x80080002, 0x40, 0x1000, 0x0, 0x0, 0x840004}) 00:01:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x2, 0x64) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000100)={0x0, r4}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:01:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000080)=0x1) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x4, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:00 executing program 4: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000000)={0xffff}) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0xfffffffd}) 00:01:00 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000240)={0x0, 0x0, "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", "d515a5df609b90c74d0e2c3eb4b355b8934dbd49be123357347c21d1c65bca25f49d692af0428d1586e3d5e4c26dc8f33cec128e70b99bdf258935dbb838d356c10d449d678765b727d3202a85eb72043023077490b23e0f7150705f726387dd173efa2e70eccfe7798d8dfa5d8aef1466bd9ee316ebe823af17206ee2f0b463e46876a992e4245b0060917d15dd8b05d55b71f8aa75f4ef35e97c7867913e1dd7ec16289e5f85288272484c6f2a731f5259151df7af8a419639a0ef00724a056ca41afad20879c96516209867aa8b64bce5c14f862494b1a18378e3fac5c9ba0788497d137c899914dbbe5000dc1b2ac654ac434aa8fc2f749bac94fc3b9b4cd3f39c36fee7aa447cf8c0cc2b29d97ac7d66899874666acc4b5ae51f2867383d0c253990e949e843b1ce32af32ab93cec1433dfe215cc16627c1acac23d2643344f22557021d8f12ebe0465f071b44cfdb5ace339f1582778224c3af79d9022d9a3e85cffa3927f1b40421b88e2d66cd1cbf4a7e269c960f7859b33abd9aa5f5e6ba3bc1a63e28d26ae01760804acbf85e8bf311dc604c5d1335e6f8042aa53c0ede0ab9883fd8fdd10f55017594106eed1345487e114df997e5e87b8a84422374c67cfb8edb68a8546d87e89d5731bd679e49b4f64d041b074def11f8b31c56b339801a26926048fdab043befa225f30b7cce38f26d9d2792855f40e07e0912f80f2829fc4a9c7e10a290c62799c5db5ec76db0893681bb7e78a36f938f5825c8fd353af14bb4d85776cca739c4902a1e5f04d5fce3ecde9fe8cde961a57e8019129c208ee780f645a9bf3d2f2618952795ab22614b94852aee2c4d47e0d8961a3940d7ecab8a636a46001ee4d56247096eda76f32fbc7fc3c1208765208cb0a3af5e4ea707e5044cc6a5da074cde74b71fa1476b54308165b8abaaedb5a6dcdca8627b9837e2c98f25de45bf346da77c761705dd6926edf4d7068b39e365945e900a44157c98d6c2779bb11a7bdabdfd5307dbaa01066a1a6b4ba6f3e3857844c23777f73c0d1a242f2f3cfaa900620dc2b437697595ced0b5218d5fd18fa4b47df6b43154f5b44c275c41f812633ea449ee93129053f0081fa297eac7e0902cfe748e4815dce32d880f1e0849cb1671dde597743c65cd0fd5a66903d57518bea6203cae96853a9a74e8dbab2451d3caed4746a041eedaa11ee972e6e3f357ceeaf589ad1583641137a0eedadf8d460ca3d1b53e5777c5be4f5538861d026e6c32ffb3c0eb737e3e0660532308ef5df3e19d8fab787e1cc5f972c9ac6b701376dc76b354ea772c71ac07a2b622858227aadbf1811abf74ee52c5582ec16207e60236114f056aeaf2268f84a890b07243991e20e0bb8c013075b2595bc061c1683924be19d2e3615a31cbcbf1bfdbe40447e403e8338920400b2733679fe50f40088c3c67426366ce35b6971170407cc7f9c674d58f4e9daa24a2d6d64a35d80521356d6e8b38b86d90083fff1c75482e66a36adb5c30e4310c99f7d124a08e5001f81c39d47553681411961b29c870857cef22aa3bbe27cfe9c5c949b43749d2f30733814cbfff7d41d5010cbccf421f2cab8ec02ed101dcb497347e3305564331dec300f32fcf4c7ae69efd164710cd6118fca7bdca1356fbefd208a188f86090021c673c6eb3c67526a1efc500a7a9120ee7fef97f920a9df95f838ec8afbb7872c8ad0b7e19cafe71ba2d91086b66b0893940fb853ebc12adf4b535516411a1d7b538c5bfc8d7d64fb9962a4528d1197080124a644929f5dcb981989cb88c76b37c4bcb0d18462e50d667c5375175671e69a58e30683dd4b0e08a87049f0cc24debf16e66110545e5cd42a0f8333b0cfcef7e74e54323a9470c137494ca1a55ee9a96e8665503504984a0e196be5114396181cfa35608899171779ade8cfe8c2110779fe00a4f1c3bcdebbce2eb93c18629d3e54cc81f1fe9bfd8fd4cec3083baf3a49d11fe89dbd2af8e4959773428c9430f66b03fa4f2e3ea64723f05c6fdadb7932ce854884fd79b065a7553e5b7d6b25e46071fc2afe80d85e31cdf92aeababfd725d80c9ab8cd43f10d4c5439d2db11014d12c591026f7c73fff749e66744a14b469b3352c75d0fd94834545bf21832da6e275b25aaffc25164dbc0557ccd57a8976d5f531a882ec171ab45368783496fb3feb7b1b767f97c9cd2d53bb785d7f1079328ecd6959814b0958281af32e977d6fa696b79f319db462607c5fbb06c251e64f84ff7538cbff5899020e69c6de2008b6603a83a12485e0d6b6ed50a0b3e526618bcf20b2f1b8079686b50106afb62d9a3ee1e302082194e80cd92ef4a50cadaa68175fd8dc5e456b52d3fe964fd571430b23d3a3c42ec7a9892c35032774ca2843c6990f143ce2c482a61047e35144a84e5e19214f3da45846eceb57ff1e35745197b0f4ba45253c0c3e2d7bdace743a4550effb073477280712503ea44fd41da74fbf240e1e50ccd5b7631bf7eec7c0bf14fe7e72869cf3d557cb88bf8c5aa8eae8fc9fc135bde6de043fbbcefa1b7173fe813c11b4b6d62cc63115300504fae9ecc5a400a02533eddcf4b958f44f25553cb21e9ed2af2afa0fc02bf45746377ce671256bd2dd4379ecdfcd5126ab003551b906c158a7e51fb57ab581db384ed4b100fb766bd7664dd546f63ee44d54463cafbb49f6470458d490f26505d732d014af35b2f054cff509c8ad699a5fc143af23735d61185fc1317e857ea63a84a344b874855add28bdc29db6c2cadac2b1e5480099e2b9d150b3c687e7d35b93b47a1bf4de22294819cd06cf4d3be644944b5789e2073155cfb721c208eccd0e1617f06e3450bbab40d0655fa5547f89109b3a13964d1417ba836ef648e033501086aff4c8f7da82abac0a29ceb69c1d58d2e67272ee05409589b02d3e2c8ae52cf0c2c04cf689fa735a77412a11316e1b00d49cd40014c39a5227197dc2a77441cb1dafb31217f4da1b82fdc2e6cd08822ce2a64ba99ed29b36b24a56d80c9031edd4951dec1cfb4d87ea01a0c1c6a36a5b30a8b543893b21c622b606a826dc11af9620f6435e7f2f4bf3387fc4ac6dfa7f563cfa1560d12fb0109b0f5fd9d4c0c8d7ef72b60a1a5e2af85cb5775c9acf26f5dd0a763194060e6341abe93c5681d2a839b8a179309651ba664e156d8a75a78c2426731a361148c1bbcbead64e6bf42433d827628439be5d61a78a3fc821e9cbc49d0c0a34d785d39cd46f7cc34fa99a4e50890196cdcadb52579d9881be29b7ef326d50217f97040948043afdb519c7a0c7981a018eb2f59afbb256c0360cebd9f4c41e811cc3991b910e3ed8adca34e2ab24ccfa7b0d7e1ef845936689404990265015fd5c9594428a2d8fb7e18ebca3dbf9907ce6caf281347249708ec319f659c4c249c17e9d2a16b5cca0902fff3158ea777718168f8bba45cd7c18d3ce2503a56e488eff67f78fb60c29446b94c21fc758dabe0f8d71b1aa501f3679cfa9481a9b19cfd8d08a27fdc6314bc0127c38d1ec8f694d049225f94d8293319de2300fb5d21527441f7c15484daf14ed3f148b430f3fe9f62b462bbc29ed9f6771a4f08723b5a833dc17d21ed31cda6e412f7a24b7f7654c9667af323ea887aa34211a6a524a9452b325a3214cfbda2e96116ba579fe765651352e58df491ca3a9b7f8fdd9c8b084fe87b8b06cd8367b203ab06f6f5182233e7000974f63d7edcb2fcf4c877dea03b70f2ba5a3fd2935128800d2b1a966cf6309263ad88ad7f12f81d14a25f6a6f830adbf577671518366ecd3cf359438cfc74b4813d7b164bcd3416dbe11c93f3ffd5e51ba0f47267371472b9a486411ed3ade4cbe9e462701e06baea9e4117049d449ce4a91fd0b1edd955515e8a1b9ea815bfea1308c8c78d7bfc21d0e459c030b3a4cc56f22296284358e8ed51e185fb3d4187332bd0551d754855c62cf5074f57b20007cf2c57eea27af0ae55ebe04f953647cde0a12a768c7610e2ac65aa6e88fa3f5c41150c162d5aa4af0b3f50a90c8933d96f487fe45092b91c6b2b032223c1b7cc4c36d408bd11a7d278816123c88b780d25693fb082c34f536e5252f07adfcc3e6f90e264e5431561a52593c5b4497bd63cda518778fe8324248bd6007773423fff24288c8b7abe2c8e8ec31e3e3048f9d835d2b883b0b54ec093d5450d57a20c1a1e64768081e68392f475e2842e1c8434f80b6a9d16d18f6edf85477586e04a01cf2daedda0c1b90bf14018e46933ed965170168a2679ed7573ee3f137189f31508bcdc1c237392524c527bd50f7c8ee32e05e6629a3c70dc4860fef79d031c7ae51c761aead500a624cc2369fdb3f36f6b27ec6f4c2c8dace3f482ce71995c8ae2c8ed04aa3e07777cafcdce1cd268905af42f1728b7c5017f80476b610e0dcbbe1b712c04c3ad1b0a8eb884de8456a543adee57c684e32dfcbf22a1e979a9dbcb4e52a7240fcec9c31cb86a6e02b7c7ea3325758be83a0beb50c61fe65e4b93dec3b29d3355220c8af0ea535c0136d1c95fc30b1b575ab797deab9aca37157c3fe8d56389a6ab67e3c7bc4616cc994a99fb167274495e62322fe5d53f885b57c84a34ebab41ec25dad6b5dad93468f781e226cbf14220237a744af4dae09a02ae88dfe4c71ad331026f62f495af050961d5f0f3f8048f25454c2761f1b070014b661a591c3fc2b1fb1c0ee3c387e87feb03233005891718abc110bf4ea7d3c420590041c1aab6a94a8b0941b885a224517043e9257b236037ad62729b73c48b26823787ff1609a6877bbe88f39539de20dc91b981cbefa22359e66a85e65382fd3150694775d9ce0d4b5459e8b65a4b0541dbc8b807bc347432a4b2aacb43ccd300607f1a3af3795b945d5053c0ce9312c213445750c04e10ac13ab0a284d6ca5d11dd5b3eed0dc19baa63612d85c7fbcf06a99b2dd15feb9d3429c12543b292cfee05a88d6ef83f6f7e42e5015c536a850c2326ed06677fbdb4d291c18338d1f0d6ea08a1ed1afe698b27b3cd3b8d0d5670b8f9a15db6607477cba96a1ca236dd85571da7b96839a28d1557d75e5690db504302babada236439194c30d88b7ac99e1c3f2be950858c4a67af33b3d253437e326bbaf202a988a9e7bcbab9aaae02e8d665cb7cd6fb3b28372ee2956f3900de5d2c46ff3520785725c8c0f101ffa96f67b8e8271136e47c3e41d7855bfa9e9a19c96d521bdc29019c6f244403d13f3458507bf7e39e34100c185135b9dc002188937e03c73faa200bf5e618b8caf83ee1808046bcbdcc830f23060ce911a9428e359961bcd9b3c5b90b0bcb328ce0f978fa881a7d81a713eb09ec91b255c51736c43c2e1dad4bc17cb8d9ba8a3fa5aeef58791dd"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001240)={r1, 0x0, "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", "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"}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000001c0)={r5}) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000240)={0x0, 0x0, "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", "d515a5df609b90c74d0e2c3eb4b355b8934dbd49be123357347c21d1c65bca25f49d692af0428d1586e3d5e4c26dc8f33cec128e70b99bdf258935dbb838d356c10d449d678765b727d3202a85eb72043023077490b23e0f7150705f726387dd173efa2e70eccfe7798d8dfa5d8aef1466bd9ee316ebe823af17206ee2f0b463e46876a992e4245b0060917d15dd8b05d55b71f8aa75f4ef35e97c7867913e1dd7ec16289e5f85288272484c6f2a731f5259151df7af8a419639a0ef00724a056ca41afad20879c96516209867aa8b64bce5c14f862494b1a18378e3fac5c9ba0788497d137c899914dbbe5000dc1b2ac654ac434aa8fc2f749bac94fc3b9b4cd3f39c36fee7aa447cf8c0cc2b29d97ac7d66899874666acc4b5ae51f2867383d0c253990e949e843b1ce32af32ab93cec1433dfe215cc16627c1acac23d2643344f22557021d8f12ebe0465f071b44cfdb5ace339f1582778224c3af79d9022d9a3e85cffa3927f1b40421b88e2d66cd1cbf4a7e269c960f7859b33abd9aa5f5e6ba3bc1a63e28d26ae01760804acbf85e8bf311dc604c5d1335e6f8042aa53c0ede0ab9883fd8fdd10f55017594106eed1345487e114df997e5e87b8a84422374c67cfb8edb68a8546d87e89d5731bd679e49b4f64d041b074def11f8b31c56b339801a26926048fdab043befa225f30b7cce38f26d9d2792855f40e07e0912f80f2829fc4a9c7e10a290c62799c5db5ec76db0893681bb7e78a36f938f5825c8fd353af14bb4d85776cca739c4902a1e5f04d5fce3ecde9fe8cde961a57e8019129c208ee780f645a9bf3d2f2618952795ab22614b94852aee2c4d47e0d8961a3940d7ecab8a636a46001ee4d56247096eda76f32fbc7fc3c1208765208cb0a3af5e4ea707e5044cc6a5da074cde74b71fa1476b54308165b8abaaedb5a6dcdca8627b9837e2c98f25de45bf346da77c761705dd6926edf4d7068b39e365945e900a44157c98d6c2779bb11a7bdabdfd5307dbaa01066a1a6b4ba6f3e3857844c23777f73c0d1a242f2f3cfaa900620dc2b437697595ced0b5218d5fd18fa4b47df6b43154f5b44c275c41f812633ea449ee93129053f0081fa297eac7e0902cfe748e4815dce32d880f1e0849cb1671dde597743c65cd0fd5a66903d57518bea6203cae96853a9a74e8dbab2451d3caed4746a041eedaa11ee972e6e3f357ceeaf589ad1583641137a0eedadf8d460ca3d1b53e5777c5be4f5538861d026e6c32ffb3c0eb737e3e0660532308ef5df3e19d8fab787e1cc5f972c9ac6b701376dc76b354ea772c71ac07a2b622858227aadbf1811abf74ee52c5582ec16207e60236114f056aeaf2268f84a890b07243991e20e0bb8c013075b2595bc061c1683924be19d2e3615a31cbcbf1bfdbe40447e403e8338920400b2733679fe50f40088c3c67426366ce35b6971170407cc7f9c674d58f4e9daa24a2d6d64a35d80521356d6e8b38b86d90083fff1c75482e66a36adb5c30e4310c99f7d124a08e5001f81c39d47553681411961b29c870857cef22aa3bbe27cfe9c5c949b43749d2f30733814cbfff7d41d5010cbccf421f2cab8ec02ed101dcb497347e3305564331dec300f32fcf4c7ae69efd164710cd6118fca7bdca1356fbefd208a188f86090021c673c6eb3c67526a1efc500a7a9120ee7fef97f920a9df95f838ec8afbb7872c8ad0b7e19cafe71ba2d91086b66b0893940fb853ebc12adf4b535516411a1d7b538c5bfc8d7d64fb9962a4528d1197080124a644929f5dcb981989cb88c76b37c4bcb0d18462e50d667c5375175671e69a58e30683dd4b0e08a87049f0cc24debf16e66110545e5cd42a0f8333b0cfcef7e74e54323a9470c137494ca1a55ee9a96e8665503504984a0e196be5114396181cfa35608899171779ade8cfe8c2110779fe00a4f1c3bcdebbce2eb93c18629d3e54cc81f1fe9bfd8fd4cec3083baf3a49d11fe89dbd2af8e4959773428c9430f66b03fa4f2e3ea64723f05c6fdadb7932ce854884fd79b065a7553e5b7d6b25e46071fc2afe80d85e31cdf92aeababfd725d80c9ab8cd43f10d4c5439d2db11014d12c591026f7c73fff749e66744a14b469b3352c75d0fd94834545bf21832da6e275b25aaffc25164dbc0557ccd57a8976d5f531a882ec171ab45368783496fb3feb7b1b767f97c9cd2d53bb785d7f1079328ecd6959814b0958281af32e977d6fa696b79f319db462607c5fbb06c251e64f84ff7538cbff5899020e69c6de2008b6603a83a12485e0d6b6ed50a0b3e526618bcf20b2f1b8079686b50106afb62d9a3ee1e302082194e80cd92ef4a50cadaa68175fd8dc5e456b52d3fe964fd571430b23d3a3c42ec7a9892c35032774ca2843c6990f143ce2c482a61047e35144a84e5e19214f3da45846eceb57ff1e35745197b0f4ba45253c0c3e2d7bdace743a4550effb073477280712503ea44fd41da74fbf240e1e50ccd5b7631bf7eec7c0bf14fe7e72869cf3d557cb88bf8c5aa8eae8fc9fc135bde6de043fbbcefa1b7173fe813c11b4b6d62cc63115300504fae9ecc5a400a02533eddcf4b958f44f25553cb21e9ed2af2afa0fc02bf45746377ce671256bd2dd4379ecdfcd5126ab003551b906c158a7e51fb57ab581db384ed4b100fb766bd7664dd546f63ee44d54463cafbb49f6470458d490f26505d732d014af35b2f054cff509c8ad699a5fc143af23735d61185fc1317e857ea63a84a344b874855add28bdc29db6c2cadac2b1e5480099e2b9d150b3c687e7d35b93b47a1bf4de22294819cd06cf4d3be644944b5789e2073155cfb721c208eccd0e1617f06e3450bbab40d0655fa5547f89109b3a13964d1417ba836ef648e033501086aff4c8f7da82abac0a29ceb69c1d58d2e67272ee05409589b02d3e2c8ae52cf0c2c04cf689fa735a77412a11316e1b00d49cd40014c39a5227197dc2a77441cb1dafb31217f4da1b82fdc2e6cd08822ce2a64ba99ed29b36b24a56d80c9031edd4951dec1cfb4d87ea01a0c1c6a36a5b30a8b543893b21c622b606a826dc11af9620f6435e7f2f4bf3387fc4ac6dfa7f563cfa1560d12fb0109b0f5fd9d4c0c8d7ef72b60a1a5e2af85cb5775c9acf26f5dd0a763194060e6341abe93c5681d2a839b8a179309651ba664e156d8a75a78c2426731a361148c1bbcbead64e6bf42433d827628439be5d61a78a3fc821e9cbc49d0c0a34d785d39cd46f7cc34fa99a4e50890196cdcadb52579d9881be29b7ef326d50217f97040948043afdb519c7a0c7981a018eb2f59afbb256c0360cebd9f4c41e811cc3991b910e3ed8adca34e2ab24ccfa7b0d7e1ef845936689404990265015fd5c9594428a2d8fb7e18ebca3dbf9907ce6caf281347249708ec319f659c4c249c17e9d2a16b5cca0902fff3158ea777718168f8bba45cd7c18d3ce2503a56e488eff67f78fb60c29446b94c21fc758dabe0f8d71b1aa501f3679cfa9481a9b19cfd8d08a27fdc6314bc0127c38d1ec8f694d049225f94d8293319de2300fb5d21527441f7c15484daf14ed3f148b430f3fe9f62b462bbc29ed9f6771a4f08723b5a833dc17d21ed31cda6e412f7a24b7f7654c9667af323ea887aa34211a6a524a9452b325a3214cfbda2e96116ba579fe765651352e58df491ca3a9b7f8fdd9c8b084fe87b8b06cd8367b203ab06f6f5182233e7000974f63d7edcb2fcf4c877dea03b70f2ba5a3fd2935128800d2b1a966cf6309263ad88ad7f12f81d14a25f6a6f830adbf577671518366ecd3cf359438cfc74b4813d7b164bcd3416dbe11c93f3ffd5e51ba0f47267371472b9a486411ed3ade4cbe9e462701e06baea9e4117049d449ce4a91fd0b1edd955515e8a1b9ea815bfea1308c8c78d7bfc21d0e459c030b3a4cc56f22296284358e8ed51e185fb3d4187332bd0551d754855c62cf5074f57b20007cf2c57eea27af0ae55ebe04f953647cde0a12a768c7610e2ac65aa6e88fa3f5c41150c162d5aa4af0b3f50a90c8933d96f487fe45092b91c6b2b032223c1b7cc4c36d408bd11a7d278816123c88b780d25693fb082c34f536e5252f07adfcc3e6f90e264e5431561a52593c5b4497bd63cda518778fe8324248bd6007773423fff24288c8b7abe2c8e8ec31e3e3048f9d835d2b883b0b54ec093d5450d57a20c1a1e64768081e68392f475e2842e1c8434f80b6a9d16d18f6edf85477586e04a01cf2daedda0c1b90bf14018e46933ed965170168a2679ed7573ee3f137189f31508bcdc1c237392524c527bd50f7c8ee32e05e6629a3c70dc4860fef79d031c7ae51c761aead500a624cc2369fdb3f36f6b27ec6f4c2c8dace3f482ce71995c8ae2c8ed04aa3e07777cafcdce1cd268905af42f1728b7c5017f80476b610e0dcbbe1b712c04c3ad1b0a8eb884de8456a543adee57c684e32dfcbf22a1e979a9dbcb4e52a7240fcec9c31cb86a6e02b7c7ea3325758be83a0beb50c61fe65e4b93dec3b29d3355220c8af0ea535c0136d1c95fc30b1b575ab797deab9aca37157c3fe8d56389a6ab67e3c7bc4616cc994a99fb167274495e62322fe5d53f885b57c84a34ebab41ec25dad6b5dad93468f781e226cbf14220237a744af4dae09a02ae88dfe4c71ad331026f62f495af050961d5f0f3f8048f25454c2761f1b070014b661a591c3fc2b1fb1c0ee3c387e87feb03233005891718abc110bf4ea7d3c420590041c1aab6a94a8b0941b885a224517043e9257b236037ad62729b73c48b26823787ff1609a6877bbe88f39539de20dc91b981cbefa22359e66a85e65382fd3150694775d9ce0d4b5459e8b65a4b0541dbc8b807bc347432a4b2aacb43ccd300607f1a3af3795b945d5053c0ce9312c213445750c04e10ac13ab0a284d6ca5d11dd5b3eed0dc19baa63612d85c7fbcf06a99b2dd15feb9d3429c12543b292cfee05a88d6ef83f6f7e42e5015c536a850c2326ed06677fbdb4d291c18338d1f0d6ea08a1ed1afe698b27b3cd3b8d0d5670b8f9a15db6607477cba96a1ca236dd85571da7b96839a28d1557d75e5690db504302babada236439194c30d88b7ac99e1c3f2be950858c4a67af33b3d253437e326bbaf202a988a9e7bcbab9aaae02e8d665cb7cd6fb3b28372ee2956f3900de5d2c46ff3520785725c8c0f101ffa96f67b8e8271136e47c3e41d7855bfa9e9a19c96d521bdc29019c6f244403d13f3458507bf7e39e34100c185135b9dc002188937e03c73faa200bf5e618b8caf83ee1808046bcbdcc830f23060ce911a9428e359961bcd9b3c5b90b0bcb328ce0f978fa881a7d81a713eb09ec91b255c51736c43c2e1dad4bc17cb8d9ba8a3fa5aeef58791dd"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001240)={r1, 0x0, "2d8342631fe36f91f984fca45eeaabedef2ffb3cdc9a165e68b775bc61ecbe91fedfc12e0786daf674ff6029cd027ea5098f89ecd304d2b1c276fcd6365b159ef6bc715580ec79819b46a17e07043134e1a345066fc33621da20dcefb7208fb3064b16ef59e460d5b21b611d00193dcd3d6cef563bad99b3ca1b54beef57ec3edff8b1afce75b35d6dc9a5e0b0f49f8600df28a492fdeff90c989d0e0a9cba44d1899bf21d5b7a1d19e64003f9989971aa6ee103e506683badc194fa6baadb0f277430a1e352694ece02a560a4a48cc59f9df8a8c7fa0f1ac7ce1545c847b66fa192c0e9b7274ce2538f694421e61824597741a7a254202bcdb608c344364351", "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"}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000001c0)={r5}) (async) 00:01:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000080)=0x1) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x4, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:00 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x26, 0x221280) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x0, 0x855, 0x80080002, 0x40, 0x1000, 0x0, 0x0, 0x840004}) syz_open_dev$dri(&(0x7f0000000100), 0x26, 0x221280) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x0, 0x855, 0x80080002, 0x40, 0x1000, 0x0, 0x0, 0x840004}) (async) 00:01:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0xfe, 0x8, 0x3, 0x20a, 0x1, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x8}, 0x48) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x101041) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:00 executing program 4: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000000)={0xffff}) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0xfffffffd}) 00:01:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) 00:01:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000140)={0x0, 0xfffffffa, 0x8, 0xfff, 0x0, 0x1, 0x9, 0x9, 0x6}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r2}) 00:01:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0xfe, 0x8, 0x3, 0x20a, 0x1, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x8}, 0x48) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x101041) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0xfe, 0x8, 0x3, 0x20a, 0x1, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x8}, 0x48) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r2}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x101041) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) 00:01:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000080)=0x1) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x4, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:00 executing program 4: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000000)={0xffff}) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0xfffffffd}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000000)={0xffff}) (async) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0xfffffffd}) (async) 00:01:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) 00:01:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000140)={0x0, 0xfffffffa, 0x8, 0xfff, 0x0, 0x1, 0x9, 0x9, 0x6}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000140)={0x0, 0xfffffffa, 0x8, 0xfff, 0x0, 0x1, 0x9, 0x9, 0x6}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r2}) (async) 00:01:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0xfe, 0x8, 0x3, 0x20a, 0x1, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x8}, 0x48) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x101041) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x9, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x8, 0x81, 0xfff, 0x0, 0x0}) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name, &(0x7f0000000180)=0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000002c0)={r4, 0x400, 0x1, 0x3, 0x492, 0x4, 0x7, 0x4, 0x0, 0x2, 0xfffffffd}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000400)={&(0x7f0000000300)="e8533e7bfa57985c0872622dafead1f7e3687bd9a844ca096cbaf0651788fa16c775a36be41b15aa84fe981f4c712deec20e66f34e43885a8226394dbfbca6a00cf11352cc5a15bc392812555feb0a991bb132455a989750daf6a35dd02322446f771e45afb3f2f0ca526904b0a707f0c84005fd2e8641dbc403aeed8713fcd9f9d4e0e45963e5f8dfaaa132e528421c15331123c51ed6b4732113a5088b49bdd73f9b76ad954b2cabd3ce5760a60c91e9bd7d8898f450771cb03ab1d117ab9231c6e11501ad6b100c576dee961413", 0xcf}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000840) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000240)={r1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$PPPOEIOCDFWD(r6, 0xb101, 0x0) 00:01:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x9}]}, {0x0, [0x30]}}, &(0x7f0000000080)=""/13, 0x27, 0xd, 0x1}, 0x20) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) 00:01:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) (rerun: 64) 00:01:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xc75082b035c83e95) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)={0x54, 0x2, 0x6, 0x6, 0x7, 0xf7, 0x8000}, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x9, 0x2, 0x20000006}) 00:01:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x9}]}, {0x0, [0x30]}}, &(0x7f0000000080)=""/13, 0x27, 0xd, 0x1}, 0x20) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x9}]}, {0x0, [0x30]}}, &(0x7f0000000080)=""/13, 0x27, 0xd, 0x1}, 0x20) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async) 00:01:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000140)={0x0, 0xfffffffa, 0x8, 0xfff, 0x0, 0x1, 0x9, 0x9, 0x6}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r2}) 00:01:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x9, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name, &(0x7f0000000180)=0x10) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000002c0)={r4, 0x400, 0x1, 0x3, 0x492, 0x4, 0x7, 0x4, 0x0, 0x2, 0xfffffffd}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) sendmsg$802154_dgram(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000400)={&(0x7f0000000300)="e8533e7bfa57985c0872622dafead1f7e3687bd9a844ca096cbaf0651788fa16c775a36be41b15aa84fe981f4c712deec20e66f34e43885a8226394dbfbca6a00cf11352cc5a15bc392812555feb0a991bb132455a989750daf6a35dd02322446f771e45afb3f2f0ca526904b0a707f0c84005fd2e8641dbc403aeed8713fcd9f9d4e0e45963e5f8dfaaa132e528421c15331123c51ed6b4732113a5088b49bdd73f9b76ad954b2cabd3ce5760a60c91e9bd7d8898f450771cb03ab1d117ab9231c6e11501ad6b100c576dee961413", 0xcf}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000840) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000240)={r1}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$PPPOEIOCDFWD(r6, 0xb101, 0x0) 00:01:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x9}]}, {0x0, [0x30]}}, &(0x7f0000000080)=""/13, 0x27, 0xd, 0x1}, 0x20) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x9}]}, {0x0, [0x30]}}, &(0x7f0000000080)=""/13, 0x27, 0xd, 0x1}, 0x20) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async) 00:01:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xc75082b035c83e95) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)={0x54, 0x2, 0x6, 0x6, 0x7, 0xf7, 0x8000}, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x9, 0x2, 0x20000006}) 00:01:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000001c0)) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0), 0x0, 0x800}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x10}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x200, 0x2, 0xef, 0x20, 0x794, 0x7f, 0x400], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000240)={0xffffffffffffffc1}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x23) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x8000001c}) syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x200) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0xc) 00:01:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x9, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x8, 0x81, 0xfff, 0x0, 0x0}) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name, &(0x7f0000000180)=0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000002c0)={r4, 0x400, 0x1, 0x3, 0x492, 0x4, 0x7, 0x4, 0x0, 0x2, 0xfffffffd}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000400)={&(0x7f0000000300)="e8533e7bfa57985c0872622dafead1f7e3687bd9a844ca096cbaf0651788fa16c775a36be41b15aa84fe981f4c712deec20e66f34e43885a8226394dbfbca6a00cf11352cc5a15bc392812555feb0a991bb132455a989750daf6a35dd02322446f771e45afb3f2f0ca526904b0a707f0c84005fd2e8641dbc403aeed8713fcd9f9d4e0e45963e5f8dfaaa132e528421c15331123c51ed6b4732113a5088b49bdd73f9b76ad954b2cabd3ce5760a60c91e9bd7d8898f450771cb03ab1d117ab9231c6e11501ad6b100c576dee961413", 0xcf}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000840) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000240)={r1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$PPPOEIOCDFWD(r6, 0xb101, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x9, 0x7}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x8, 0x81, 0xfff}) (async) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name, &(0x7f0000000180)=0x10) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000002c0)={r4, 0x400, 0x1, 0x3, 0x492, 0x4, 0x7, 0x4, 0x0, 0x2, 0xfffffffd}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) sendmsg$802154_dgram(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000400)={&(0x7f0000000300)="e8533e7bfa57985c0872622dafead1f7e3687bd9a844ca096cbaf0651788fa16c775a36be41b15aa84fe981f4c712deec20e66f34e43885a8226394dbfbca6a00cf11352cc5a15bc392812555feb0a991bb132455a989750daf6a35dd02322446f771e45afb3f2f0ca526904b0a707f0c84005fd2e8641dbc403aeed8713fcd9f9d4e0e45963e5f8dfaaa132e528421c15331123c51ed6b4732113a5088b49bdd73f9b76ad954b2cabd3ce5760a60c91e9bd7d8898f450771cb03ab1d117ab9231c6e11501ad6b100c576dee961413", 0xcf}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000840) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000240)={r1}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$PPPOEIOCDFWD(r6, 0xb101, 0x0) (async) 00:01:00 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x2000) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000040)={0x2, 0xe72}) 00:01:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xc75082b035c83e95) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)={0x54, 0x2, 0x6, 0x6, 0x7, 0xf7, 0x8000}, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x9, 0x2, 0x20000006}) 00:01:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000001c0)) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0), 0x0, 0x800}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x10}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x200, 0x2, 0xef, 0x20, 0x794, 0x7f, 0x400], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000240)={0xffffffffffffffc1}) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x23) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x8000001c}) (async) syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x200) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0xc) 00:01:00 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) (async) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)) (async) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x2000) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000040)={0x2, 0xe72}) 00:01:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x3, 0x1ff, 0xffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000180)={r4}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000100)) 00:01:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000001c0)) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0), 0x0, 0x800}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x10}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x200, 0x2, 0xef, 0x20, 0x794, 0x7f, 0x400], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000240)={0xffffffffffffffc1}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x23) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x8000001c}) syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x200) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0xc) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000001c0)) (async) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0), 0x0, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x10}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x200, 0x2, 0xef, 0x20, 0x794, 0x7f, 0x400], 0x7}) (async) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000240)={0xffffffffffffffc1}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x23) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x8000001c}) (async) syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x200) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0xc) (async) 00:01:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x3, 0x1ff, 0xffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async, rerun: 64) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000180)={r4}) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000100)) (rerun: 64) 00:01:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xfffffff8, 0x4, 0x81}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:00 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x2000) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000040)={0x2, 0xe72}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) (async) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)) (async) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x2000) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000040)={0x2, 0xe72}) (async) 00:01:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000140)={0x0, 0xfffffffa, 0x8, 0xfff, 0x0, 0x1, 0x9, 0x9, 0x6}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r2}) 00:01:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) 00:01:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x3, 0x1ff, 0xffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000180)={r4}) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000100)) 00:01:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xfffffff8, 0x4, 0x81}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x40081, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r6, 0xc00464c9, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}]}) 00:01:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) 00:01:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) 00:01:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xfffffff8, 0x4, 0x81}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xffffff69, 0x401, 0x80000001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x2, 0x64) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000100)={0x0, r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:01:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x40081, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r6, 0xc00464c9, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}]}) 00:01:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (rerun: 32) 00:01:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) 00:01:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080)=0x7, 0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xffffff69, 0x401, 0x80000001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x400c, 0x8, 0x1000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000100)={0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000140)={r5}) 00:01:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x40081, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r6, 0xc00464c9, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}]}) 00:01:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async) 00:01:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x101200, 0xfce871446bc28746) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)="efa3f8de105f59981caf34ba201fa3434e2c572c97eaf4fba4a1e20a6ecfc63c9e2e5dfef75b88bf3e77390238fc96da966919d04f5584ca06a60959c4e1842e6930976a27dd0a465be1ed32f07c6e579a91e5fce253bfe0cdcb74c4686ea123a0c3144eb88e0573f47a19c156e3d05dc8cdb38321a8715325396237d0869cc12b2bb1a0882aae9b95aab2a8b1e08dedb15cfdcde5999b7d729e233113d48aa3aa89a5e3edaf7861571389e6514cf03861a976522b0aef781fcca32945284b86d41dab195aa78161a7cab74e53d8e3ae858f46587150cd77d606b39abd0cff107948000493f0c559bcfcd293", 0xec}, 0x1, 0x0, 0x0, 0x4000810}, 0x1) 00:01:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x800) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r7 = openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000300)='GPL\x00', 0x7ee4, 0x69, &(0x7f0000000340)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000400)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x0, 0xfff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r5, r6]}, 0x80) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000540)={@desc={0x1, 0x0, @auto="77f8a42d68e473f7"}}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r7, 0xc00464c9, &(0x7f0000000580)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000080)=""/21, 0x15, 0x0, &(0x7f00000000c0)=""/203, 0xcb}}, 0x10) 00:01:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xffffff69, 0x401, 0x80000001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x101200, 0xfce871446bc28746) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)="efa3f8de105f59981caf34ba201fa3434e2c572c97eaf4fba4a1e20a6ecfc63c9e2e5dfef75b88bf3e77390238fc96da966919d04f5584ca06a60959c4e1842e6930976a27dd0a465be1ed32f07c6e579a91e5fce253bfe0cdcb74c4686ea123a0c3144eb88e0573f47a19c156e3d05dc8cdb38321a8715325396237d0869cc12b2bb1a0882aae9b95aab2a8b1e08dedb15cfdcde5999b7d729e233113d48aa3aa89a5e3edaf7861571389e6514cf03861a976522b0aef781fcca32945284b86d41dab195aa78161a7cab74e53d8e3ae858f46587150cd77d606b39abd0cff107948000493f0c559bcfcd293", 0xec}, 0x1, 0x0, 0x0, 0x4000810}, 0x1) 00:01:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x400c, 0x8, 0x1000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000100)={0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000140)={r5}) 00:01:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000200)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x7, 0x200, 0x5], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f00000001c0)={0x2, 0x6, &(0x7f00000000c0)=[0x9, 0x3, 0x4, 0x5, 0x7f, 0x1], &(0x7f0000000140)=[0xfff7, 0x3, 0x7], &(0x7f0000000180)=[0x4, 0x7e, 0x8, 0x6]}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) 00:01:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x8, 0x8000], 0x2, 0xddc5ffabde6b76a0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x2bb, 0x2], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000003c0)={0x6, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) 00:01:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x400, 0x42000) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f00000000c0)={0x2, 0x9, 0x9, 0x6, 0x80, 0x2, 0x5, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x7, 0x200, 0x5], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f00000001c0)={0x2, 0x6, &(0x7f00000000c0)=[0x9, 0x3, 0x4, 0x5, 0x7f, 0x1], &(0x7f0000000140)=[0xfff7, 0x3, 0x7], &(0x7f0000000180)=[0x4, 0x7e, 0x8, 0x6]}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) 00:01:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000200)={r6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x101200, 0xfce871446bc28746) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)="efa3f8de105f59981caf34ba201fa3434e2c572c97eaf4fba4a1e20a6ecfc63c9e2e5dfef75b88bf3e77390238fc96da966919d04f5584ca06a60959c4e1842e6930976a27dd0a465be1ed32f07c6e579a91e5fce253bfe0cdcb74c4686ea123a0c3144eb88e0573f47a19c156e3d05dc8cdb38321a8715325396237d0869cc12b2bb1a0882aae9b95aab2a8b1e08dedb15cfdcde5999b7d729e233113d48aa3aa89a5e3edaf7861571389e6514cf03861a976522b0aef781fcca32945284b86d41dab195aa78161a7cab74e53d8e3ae858f46587150cd77d606b39abd0cff107948000493f0c559bcfcd293", 0xec}, 0x1, 0x0, 0x0, 0x4000810}, 0x1) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x101200, 0xfce871446bc28746) (async) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)="efa3f8de105f59981caf34ba201fa3434e2c572c97eaf4fba4a1e20a6ecfc63c9e2e5dfef75b88bf3e77390238fc96da966919d04f5584ca06a60959c4e1842e6930976a27dd0a465be1ed32f07c6e579a91e5fce253bfe0cdcb74c4686ea123a0c3144eb88e0573f47a19c156e3d05dc8cdb38321a8715325396237d0869cc12b2bb1a0882aae9b95aab2a8b1e08dedb15cfdcde5999b7d729e233113d48aa3aa89a5e3edaf7861571389e6514cf03861a976522b0aef781fcca32945284b86d41dab195aa78161a7cab74e53d8e3ae858f46587150cd77d606b39abd0cff107948000493f0c559bcfcd293", 0xec}, 0x1, 0x0, 0x0, 0x4000810}, 0x1) (async) 00:01:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x400c, 0x8, 0x1000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000100)={0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000140)={r5}) 00:01:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x400, 0x42000) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f00000000c0)={0x2, 0x9, 0x9, 0x6, 0x80, 0x2, 0x5, 0x1, 0x5}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfff, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x81, 0x8000], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x8000, 0xca, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x4, 0x10001], 0x2, 0xf665a19825cb5948, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f0000000240)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000100)={r6}) 00:01:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x7, 0x200, 0x5], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f00000001c0)={0x2, 0x6, &(0x7f00000000c0)=[0x9, 0x3, 0x4, 0x5, 0x7f, 0x1], &(0x7f0000000140)=[0xfff7, 0x3, 0x7], &(0x7f0000000180)=[0x4, 0x7e, 0x8, 0x6]}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x7, 0x200, 0x5], 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f00000001c0)={0x2, 0x6, &(0x7f00000000c0)=[0x9, 0x3, 0x4, 0x5, 0x7f, 0x1], &(0x7f0000000140)=[0xfff7, 0x3, 0x7], &(0x7f0000000180)=[0x4, 0x7e, 0x8, 0x6]}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async) 00:01:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x400, 0x42000) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f00000000c0)={0x2, 0x9, 0x9, 0x6, 0x80, 0x2, 0x5, 0x1, 0x5}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (rerun: 32) 00:01:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0xa, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) 00:01:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000200)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) 00:01:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x1000008, 0x83, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0xa, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0xa, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) (async) 00:01:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) 00:01:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x200000, 0x10) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000180)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x2}, 0xe) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x8001, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000140)={r7}) 00:01:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0xffffffff, 0x101200) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000380)={0x2, &(0x7f0000000180)=[{}, {}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000080)=0x2) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r7, 0x0, "026ac9", "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"}}, 0x110) 00:01:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x21f, 0x8040) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) 00:01:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0xa, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) 00:01:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2e06, 0x7ff, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000200)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x8800000000000, 0x480080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x40) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000100)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x81, 0x2002) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000180)={0x1, 0x3ff, 0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) 00:01:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2e06, 0x7ff, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000200)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x400000000000029, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) 00:01:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x21f, 0x8040) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) 00:01:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x18}, 0xc) 00:01:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000080)={0x4, 0x1, 0xffff, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000140), 0xffffffff, 0x101200) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000380)={0x2, &(0x7f0000000180)=[{}, {}]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000080)=0x2) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r7, 0x0, "026ac9", "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"}}, 0x110) 00:01:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x400000000000029, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) 00:01:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2e06, 0x7ff, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000200)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x18}, 0xc) 00:01:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x21f, 0x8040) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) 00:01:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000080)={0x4, 0x1, 0xffff, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x400000000000029, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) 00:01:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000140), 0xffffffff, 0x101200) (rerun: 64) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000380)={0x2, &(0x7f0000000180)=[{}, {}]}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async, rerun: 32) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000080)=0x2) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r4}) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r7, 0x0, "026ac9", "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"}}, 0x110) 00:01:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2e06, 0x7ff, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000200)={r5}) 00:01:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x18}, 0xc) 00:01:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000080)={0x4, 0x1, 0xffff, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x0, 0x0, 0xc3e, 0x0, 0x6, 0x5}) 00:01:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x400402) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000000)={0x8000000000000001, 0x73e3ee65, 0x1c7197c2}) 00:01:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2e06, 0x7ff, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000180)) 00:01:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 00:01:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x0, 0x0, 0xc3e, 0x0, 0x6, 0x5}) 00:01:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x400402) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000000)={0x8000000000000001, 0x73e3ee65, 0x1c7197c2}) 00:01:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x3040a0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x80000001, 0x8, 0xfffffffb, 0x7, 0x3ff, 0x9, 0xfff}) 00:01:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2e06, 0x7ff, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) 00:01:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x606400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x2, 0x8, 0xffc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f00000000c0)) 00:01:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x0, 0x0, 0xc3e, 0x0, 0x6, 0x5}) 00:01:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x400402) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000000)={0x8000000000000001, 0x73e3ee65, 0x1c7197c2}) 00:01:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x3040a0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x80000001, 0x8, 0xfffffffb, 0x7, 0x3ff, 0x9, 0xfff}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x3040a0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)={r3}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x80000001, 0x8, 0xfffffffb, 0x7, 0x3ff, 0x9, 0xfff}) (async) 00:01:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x606400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x2, 0x8, 0xffc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2e06, 0x7ff, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) 00:01:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) 00:01:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000)) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x800, 0x90) r2 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x19da80, 0x81) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r2}) 00:01:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)) 00:01:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x3040a0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x80000001, 0x8, 0xfffffffb, 0x7, 0x3ff, 0x9, 0xfff}) 00:01:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x606400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x2, 0x8, 0xffc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2e06, 0x7ff, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) 00:01:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) (async) 00:01:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000)) (async) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x800, 0x90) (async) r2 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x19da80, 0x81) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r2}) 00:01:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)) 00:01:02 executing program 0: syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) 00:01:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) 00:01:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000)) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x800, 0x90) r2 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x19da80, 0x81) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r2}) 00:01:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2e06, 0x7ff, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) 00:01:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)) 00:01:02 executing program 5: ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000140)={0x0, r5, 0x6a7, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000200)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r6}) openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2e06, 0x7ff, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 00:01:02 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x101200) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x8000000, 0x7f, 0x0, 0x0, 0x2, 0x81, 0x40000}) syz_open_dev$dri(&(0x7f0000000140), 0x7, 0x40000) 00:01:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x10000000}) 00:01:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:02 executing program 5: ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000140)={0x0, r5, 0x6a7, 0x0, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2e06, 0x7ff, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000200)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r6}) openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x10000000}) 00:01:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:02 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x101200) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x8000000, 0x7f, 0x0, 0x0, 0x2, 0x81, 0x40000}) syz_open_dev$dri(&(0x7f0000000140), 0x7, 0x40000) 00:01:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x10000000}) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x10000000}) (async) 00:01:02 executing program 5: ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000140)={0x0, r5, 0x6a7, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000140)={0x0, r5, 0x6a7, 0x0, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2e06, 0x7ff, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)) 00:01:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000200)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r6}) openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:02 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x101200) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x8000000, 0x7f, 0x0, 0x0, 0x2, 0x81, 0x40000}) (async) syz_open_dev$dri(&(0x7f0000000140), 0x7, 0x40000) 00:01:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x14, 0x5, 0x800, 0x8, 0xc8, 0xffffffffffffffff, 0x8001, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x48) 00:01:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:02 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x14000) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x8040) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x4, 0xffffffff, 0xbd}) 00:01:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2e06, 0x7ff, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)) 00:01:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x14, 0x5, 0x800, 0x8, 0xc8, 0xffffffffffffffff, 0x8001, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x48) 00:01:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000080), 0x4) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x42c041) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x4000) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0xf95, 0x3f8a050a, 0xaae, 0x6, 0x7], 0x5, 0x80800}) 00:01:02 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x14000) (async, rerun: 32) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (rerun: 32) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x8040) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x4, 0xffffffff, 0xbd}) 00:01:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2e06, 0x7ff, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)) 00:01:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000080), 0x4) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x42c041) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000080), 0x4) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x42c041) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) 00:01:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x12000) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x8000000000000000, 0x0, 0x10001}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000100)) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f00000000c0)={0x400, 0x82bb, 0x4, 0x80000001, 0x0, 0xfffffffffffffe01}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000200)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r6}) 00:01:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x14, 0x5, 0x800, 0x8, 0xc8, 0xffffffffffffffff, 0x8001, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x48) 00:01:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:03 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x14000) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async, rerun: 64) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x8040) (rerun: 64) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x4, 0xffffffff, 0xbd}) 00:01:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x808001, 0x1) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000140)) 00:01:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000080), 0x4) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x42c041) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000080), 0x4) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x42c041) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) 00:01:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000000c0)) 00:01:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x600c, 0x8, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:03 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r1 = openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}, 0x21, 0x0, '\x00', @c}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x2000003, 0x0, 0x40, 0x0, 0x7, 0x9, 0x80000000, 0x7}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000000), 0x4) 00:01:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x808001, 0x1) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async) openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x808001, 0x1) (async) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000140)) (async) 00:01:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000000c0)) 00:01:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:03 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r1 = openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}, 0x21, 0x0, '\x00', @c}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x2000003, 0x0, 0x40, 0x0, 0x7, 0x9, 0x80000000, 0x7}) (async, rerun: 32) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (rerun: 32) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000000), 0x4) 00:01:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x600c, 0x8, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x400b, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)=0x2, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000140)=0xfffffc00, 0x4) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000140)=0x1, 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffff76, 0x402) ioctl$DRM_IOCTL_ADD_BUFS(r7, 0xc0206416, &(0x7f0000000240)={0x10001, 0x7, 0x8, 0xffff, 0x0, 0x38}) syz_open_dev$dri(&(0x7f0000000300), 0x2, 0x280200) 00:01:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x808001, 0x1) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000140)) 00:01:03 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140)={r0}) 00:01:03 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r1 = openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}, 0x21, 0x0, '\x00', @c}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x2000003, 0x0, 0x40, 0x0, 0x7, 0x9, 0x80000000, 0x7}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000000), 0x4) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}, 0x21, 0x0, '\x00', @c}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x2000003, 0x0, 0x40, 0x0, 0x7, 0x9, 0x80000000, 0x7}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000000), 0x4) (async) 00:01:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x600c, 0x8, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x46, 0x80802) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) [ 3169.382381] Trying to set illegal importance in message 00:01:03 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000001c0)={r1}) 00:01:03 executing program 0: name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x0, 0x86) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000280)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x2002) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) readlinkat(r5, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/151, 0x97) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 00:01:03 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140)={r0}) 00:01:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8005, 0x20000008, 0x7fffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x46, 0x80802) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000080), 0x46, 0x80802) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async) 00:01:03 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000001c0)={r1}) 00:01:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8005, 0x20000008, 0x7fffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8000, 0x7, 0x3, 0xfffff000, 0x5, 0x1], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x8, 0x80, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:03 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140)={r0}) 00:01:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 00:01:03 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000001c0)={r1}) 00:01:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x46, 0x80802) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (rerun: 32) 00:01:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) (async) 00:01:03 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x9, 0x3, 0x1a50, 0x1, 0x8, 0x10000], 0x6, 0x80000}) 00:01:03 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8005, 0x20000008, 0x7fffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffe, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8005, 0x20000008, 0x7fffffff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:03 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:03 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x9, 0x3, 0x1a50, 0x1, 0x8, 0x10000], 0x6, 0x80000}) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x9, 0x3, 0x1a50, 0x1, 0x8, 0x10000], 0x6, 0x80000}) (async) 00:01:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000}) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x109000) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000140)) 00:01:03 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:03 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x9, 0x3, 0x1a50, 0x1, 0x8, 0x10000], 0x6, 0x80000}) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x9, 0x3, 0x1a50, 0x1, 0x8, 0x10000], 0x6, 0x80000}) (async) 00:01:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000}) (async) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x109000) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000140)) 00:01:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:03 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) write$khugepaged_scan(r0, &(0x7f0000000140), 0x8) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x40000000000027, 0x401) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x10001, 0x1, 0x3, 0x7f, 0x1ff, 0x2, 0xbe02], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000180)={@desc={0x1, 0x0, @desc4}, 0xa, 0x0, '\x00', @auto=[0x3e, 0x12, 0x40, 0x16, 0x27, 0x14, 0x1c, 0x38, 0x22, 0x1d]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000000c0)={r3}) 00:01:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) 00:01:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xa, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x10001, 0x400, 0x3ff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000}) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x109000) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000}) (async) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x109000) (async) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000140)) (async) 00:01:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:04 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) write$khugepaged_scan(r0, &(0x7f0000000140), 0x8) (async) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x40000000000027, 0x401) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x10001, 0x1, 0x3, 0x7f, 0x1ff, 0x2, 0xbe02], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000180)={@desc={0x1, 0x0, @desc4}, 0xa, 0x0, '\x00', @auto=[0x3e, 0x12, 0x40, 0x16, 0x27, 0x14, 0x1c, 0x38, 0x22, 0x1d]}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000000c0)={r3}) 00:01:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xa, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x10001, 0x400, 0x3ff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x0, 0x3}, 0x4}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="2847b7f9c9f97db6e9da4c85c07ffe6fe45d2ee27c90d6a38837540d1487dfc40cd8e85b2ebe02f4d99137e9206ca481b3fcffcd6dc03d", 0x37}, {&(0x7f00000001c0)="9eb6002dd8c54429bb5516671c31d1d197eceed41b60d17386c23b15afb31480e720d031cf447a6a7a11f2a18c5115537485be8db72b95576d4933845dbcbedf75d52dbcee7423f0d2c2b4cdc862f19731269dce7257c6a1633dc574b4938bce1b5041379972d0365a0a35e9739c31f2bfb8384c2c1584be6d9c83fc659eacbcdbe435bfc58119687b3b624681ffe2d544c4eeca922331585a6f873a", 0x9c}, {&(0x7f0000000280)="019bd215e8713fecc48fa5fc943837032c7f803b1a714c9e019a4aa4c6af0c5b8e8b7fc31970971a46f64af4bd1a53fd41f281ffb4a6afd501d8768c4abb630fd23b80c51bca1957adccb23f3c2453305d453397a9fde178e49049a58c9422d963c8105fedaf313cf7603bddde0a", 0x6e}], 0x3, &(0x7f0000000340)="0c652b0bf87b91de74c8910beb8d909c8be52c3d69673cbd68a37df2a5512298c4e061904f4b938b057529e0aed9b4df94f792486b1ded7b0b33609f2e849ef4e418aad0045c8c8dc7d21bbe197c24d623b170b831b2e2fd5e5c9cb6734633029ec8f7be674f8bb5188ecd98194c7711df68673f57d64008", 0x78, 0x4004000}, 0x4000) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x281) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0x2], 0x2, 0x80000}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) 00:01:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:04 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) write$khugepaged_scan(r0, &(0x7f0000000140), 0x8) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x40000000000027, 0x401) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x10001, 0x1, 0x3, 0x7f, 0x1ff, 0x2, 0xbe02], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000180)={@desc={0x1, 0x0, @desc4}, 0xa, 0x0, '\x00', @auto=[0x3e, 0x12, 0x40, 0x16, 0x27, 0x14, 0x1c, 0x38, 0x22, 0x1d]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000000c0)={r3}) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) write$khugepaged_scan(r0, &(0x7f0000000140), 0x8) (async) syz_open_dev$dri(&(0x7f0000000100), 0x40000000000027, 0x401) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x10001, 0x1, 0x3, 0x7f, 0x1ff, 0x2, 0xbe02], 0x7, 0x80000}) (async) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000180)={@desc={0x1, 0x0, @desc4}, 0xa, 0x0, '\x00', @auto=[0x3e, 0x12, 0x40, 0x16, 0x27, 0x14, 0x1c, 0x38, 0x22, 0x1d]}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000000c0)={r3}) (async) 00:01:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f00000000c0)) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000080)) 00:01:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x17fff, 0x4, 0xf8e1, 0x3, 0x6, 0x1], 0x6, 0xc00, 0x0, 0xffffffffffffffff}) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 00:01:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x0, 0x3}, 0x4}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="2847b7f9c9f97db6e9da4c85c07ffe6fe45d2ee27c90d6a38837540d1487dfc40cd8e85b2ebe02f4d99137e9206ca481b3fcffcd6dc03d", 0x37}, {&(0x7f00000001c0)="9eb6002dd8c54429bb5516671c31d1d197eceed41b60d17386c23b15afb31480e720d031cf447a6a7a11f2a18c5115537485be8db72b95576d4933845dbcbedf75d52dbcee7423f0d2c2b4cdc862f19731269dce7257c6a1633dc574b4938bce1b5041379972d0365a0a35e9739c31f2bfb8384c2c1584be6d9c83fc659eacbcdbe435bfc58119687b3b624681ffe2d544c4eeca922331585a6f873a", 0x9c}, {&(0x7f0000000280)="019bd215e8713fecc48fa5fc943837032c7f803b1a714c9e019a4aa4c6af0c5b8e8b7fc31970971a46f64af4bd1a53fd41f281ffb4a6afd501d8768c4abb630fd23b80c51bca1957adccb23f3c2453305d453397a9fde178e49049a58c9422d963c8105fedaf313cf7603bddde0a", 0x6e}], 0x3, &(0x7f0000000340)="0c652b0bf87b91de74c8910beb8d909c8be52c3d69673cbd68a37df2a5512298c4e061904f4b938b057529e0aed9b4df94f792486b1ded7b0b33609f2e849ef4e418aad0045c8c8dc7d21bbe197c24d623b170b831b2e2fd5e5c9cb6734633029ec8f7be674f8bb5188ecd98194c7711df68673f57d64008", 0x78, 0x4004000}, 0x4000) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x281) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0x2], 0x2, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) 00:01:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000002c0)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r4, 0x0, "28a5f8", "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"}}, 0x110) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x8000, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x4}, r4}}, 0x30) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x401}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x4, @mcast1, 0x9}, r5}}, 0x30) 00:01:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xceab, 0x80040) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:04 executing program 5: ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000040)={0x2000001}) 00:01:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x0, 0x3}, 0x4}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="2847b7f9c9f97db6e9da4c85c07ffe6fe45d2ee27c90d6a38837540d1487dfc40cd8e85b2ebe02f4d99137e9206ca481b3fcffcd6dc03d", 0x37}, {&(0x7f00000001c0)="9eb6002dd8c54429bb5516671c31d1d197eceed41b60d17386c23b15afb31480e720d031cf447a6a7a11f2a18c5115537485be8db72b95576d4933845dbcbedf75d52dbcee7423f0d2c2b4cdc862f19731269dce7257c6a1633dc574b4938bce1b5041379972d0365a0a35e9739c31f2bfb8384c2c1584be6d9c83fc659eacbcdbe435bfc58119687b3b624681ffe2d544c4eeca922331585a6f873a", 0x9c}, {&(0x7f0000000280)="019bd215e8713fecc48fa5fc943837032c7f803b1a714c9e019a4aa4c6af0c5b8e8b7fc31970971a46f64af4bd1a53fd41f281ffb4a6afd501d8768c4abb630fd23b80c51bca1957adccb23f3c2453305d453397a9fde178e49049a58c9422d963c8105fedaf313cf7603bddde0a", 0x6e}], 0x3, &(0x7f0000000340)="0c652b0bf87b91de74c8910beb8d909c8be52c3d69673cbd68a37df2a5512298c4e061904f4b938b057529e0aed9b4df94f792486b1ded7b0b33609f2e849ef4e418aad0045c8c8dc7d21bbe197c24d623b170b831b2e2fd5e5c9cb6734633029ec8f7be674f8bb5188ecd98194c7711df68673f57d64008", 0x78, 0x4004000}, 0x4000) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x281) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0x2], 0x2, 0x80000}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x0, 0x3}, 0x4}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="2847b7f9c9f97db6e9da4c85c07ffe6fe45d2ee27c90d6a38837540d1487dfc40cd8e85b2ebe02f4d99137e9206ca481b3fcffcd6dc03d", 0x37}, {&(0x7f00000001c0)="9eb6002dd8c54429bb5516671c31d1d197eceed41b60d17386c23b15afb31480e720d031cf447a6a7a11f2a18c5115537485be8db72b95576d4933845dbcbedf75d52dbcee7423f0d2c2b4cdc862f19731269dce7257c6a1633dc574b4938bce1b5041379972d0365a0a35e9739c31f2bfb8384c2c1584be6d9c83fc659eacbcdbe435bfc58119687b3b624681ffe2d544c4eeca922331585a6f873a", 0x9c}, {&(0x7f0000000280)="019bd215e8713fecc48fa5fc943837032c7f803b1a714c9e019a4aa4c6af0c5b8e8b7fc31970971a46f64af4bd1a53fd41f281ffb4a6afd501d8768c4abb630fd23b80c51bca1957adccb23f3c2453305d453397a9fde178e49049a58c9422d963c8105fedaf313cf7603bddde0a", 0x6e}], 0x3, &(0x7f0000000340)="0c652b0bf87b91de74c8910beb8d909c8be52c3d69673cbd68a37df2a5512298c4e061904f4b938b057529e0aed9b4df94f792486b1ded7b0b33609f2e849ef4e418aad0045c8c8dc7d21bbe197c24d623b170b831b2e2fd5e5c9cb6734633029ec8f7be674f8bb5188ecd98194c7711df68673f57d64008", 0x78, 0x4004000}, 0x4000) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x281) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0x2], 0x2, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) 00:01:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x2000000000000000, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r2 = openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r3 = openat$incfs(r2, &(0x7f0000000080)='.pending_reads\x00', 0x80000, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xe57, 0x8, 0xffb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000200)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r6}) 00:01:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) 00:01:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x8400) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000180)={0x4a, 0x8, 0x0, 0x3cd84000, 0x3}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) 00:01:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x1, 0x8d91}) 00:01:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x18201) r5 = openat$incfs(r4, &(0x7f0000000280)='.pending_reads\x00', 0x80000, 0x0) getsockname$tipc(r5, &(0x7f00000002c0)=@name, &(0x7f0000000300)=0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0xa0abd12, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000140)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f0000000240)={r8}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000200)={r8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r10, 0xc00464b4, &(0x7f00000001c0)={r8}) 00:01:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x4002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) 00:01:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x0, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc0045878, &(0x7f0000000040)={0x2000000}) 00:01:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7fff, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000200)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000240)={r7}) r8 = openat$incfs(0xffffffffffffffff, &(0x7f0000000280)='.log\x00', 0x800, 0x74) ioctl$DRM_IOCTL_ADD_CTX(r8, 0xc0086420, &(0x7f00000002c0)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r4, 0xc00864c0, &(0x7f0000000180)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xd6, 0xef], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x400000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000280)={0x5, 0x3f, 0xa3d4, 0xdededede}) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f0000000100)={0x401}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000140)) 00:01:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (fail_nth: 1) 00:01:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000000)) 00:01:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x0, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (fail_nth: 1) 00:01:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (fail_nth: 1) 00:01:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x0, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000000)) 00:01:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x0, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000000)) 00:01:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x0, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x0, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x2, &(0x7f00000001c0)={r3}) 00:01:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x2, &(0x7f00000001c0)={r3}) 00:01:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x224041) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000040)=[0x1, 0x2, 0xcd], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) syz_open_dev$dri(&(0x7f00000012c0), 0x7, 0x10b400) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000001300)={0x0, 0x4a, 0x801ff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000001c0)=[0x0]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x20a00, 0x0) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000001280)=r3) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000240)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001940)={r6, 0x0, "94b3b646de4a8a664e55a7b21d8b70cfc1141c53a1caaf82a47bea5dab3e230bab3b4db8e315d76be357122f88ca0505848f96e32765bfc4c97158c8b4ab8569734dc0bf4987ea7f9569604dc96c09c8faf3cff2c4b02117bf8313cbac1ad2de5b836edb9cd3ed91ccd4bccb44c4738df6339cd8de3a6e0e842d3579d06f4c07e0607368c0bb8e086dd3d62b8e7485df9098acad48c1566b53997f2621cc9fc664ba7a9653f91ad3c3ad833e861575b41440f8931752628d13b2ef2e6af395597313aace6be0e1d8d18bc7344151853089c5fb64804cf002670a5ce0a6c632de10ca955341eb952d458462fdb9240ba010c3f98dcb9ee36c8b4b5794075015cd", "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"}) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x222002) renameat(r7, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 00:01:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x0, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x2, &(0x7f00000001c0)={r3}) 00:01:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x0, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x224041) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000040)=[0x1, 0x2, 0xcd], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) syz_open_dev$dri(&(0x7f00000012c0), 0x7, 0x10b400) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000001300)={0x0, 0x4a, 0x801ff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000001c0)=[0x0]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x20a00, 0x0) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000001280)=r3) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000240)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001940)={r6, 0x0, "94b3b646de4a8a664e55a7b21d8b70cfc1141c53a1caaf82a47bea5dab3e230bab3b4db8e315d76be357122f88ca0505848f96e32765bfc4c97158c8b4ab8569734dc0bf4987ea7f9569604dc96c09c8faf3cff2c4b02117bf8313cbac1ad2de5b836edb9cd3ed91ccd4bccb44c4738df6339cd8de3a6e0e842d3579d06f4c07e0607368c0bb8e086dd3d62b8e7485df9098acad48c1566b53997f2621cc9fc664ba7a9653f91ad3c3ad833e861575b41440f8931752628d13b2ef2e6af395597313aace6be0e1d8d18bc7344151853089c5fb64804cf002670a5ce0a6c632de10ca955341eb952d458462fdb9240ba010c3f98dcb9ee36c8b4b5794075015cd", "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"}) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x222002) renameat(r7, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x224041) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000040)=[0x1, 0x2, 0xcd], 0x3}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) syz_open_dev$dri(&(0x7f00000012c0), 0x7, 0x10b400) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000001300)={0x0, 0x4a, 0x801ff}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000001c0)=[0x0]}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x20a00, 0x0) (async) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000001280)=r3) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000240)={0x0, 0x0, "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", "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"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001940)={r6, 0x0, "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", "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"}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x222002) (async) renameat(r7, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') (async) 00:01:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5421, &(0x7f00000001c0)={r3}) 00:01:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5421, &(0x7f00000001c0)={r3}) 00:01:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5421, &(0x7f00000001c0)={r3}) 00:01:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x0, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x224041) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000040)=[0x1, 0x2, 0xcd], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) syz_open_dev$dri(&(0x7f00000012c0), 0x7, 0x10b400) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000001300)={0x0, 0x4a, 0x801ff}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000001c0)=[0x0]}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x20a00, 0x0) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000001280)=r3) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000240)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001940)={r6, 0x0, "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", "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"}) (async) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x222002) renameat(r7, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 00:01:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5450, &(0x7f00000001c0)={r3}) 00:01:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5450, &(0x7f00000001c0)={r3}) 00:01:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5450, &(0x7f00000001c0)={r3}) 00:01:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5451, &(0x7f00000001c0)={r3}) 00:01:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5451, &(0x7f00000001c0)={r3}) 00:01:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5452, &(0x7f00000001c0)={r3}) 00:01:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5451, &(0x7f00000001c0)={r3}) 00:01:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5460, &(0x7f00000001c0)={r3}) 00:01:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x3, 0x4}) 00:01:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5452, &(0x7f00000001c0)={r3}) 00:01:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5452, &(0x7f00000001c0)={r3}) 00:01:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x40049409, &(0x7f00000001c0)={r3}) 00:01:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x3, 0x4}) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x3, 0x4}) (async) 00:01:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5460, &(0x7f00000001c0)={r3}) 00:01:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5460, &(0x7f00000001c0)={r3}) 00:01:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x4020940d, &(0x7f00000001c0)={r3}) 00:01:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x3, 0x4}) 00:01:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x40049409, &(0x7f00000001c0)={r3}) 00:01:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x40049409, &(0x7f00000001c0)={r3}) 00:01:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)) 00:01:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045878, &(0x7f00000001c0)={r3}) 00:01:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x4020940d, &(0x7f00000001c0)={r3}) 00:01:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}) 00:01:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x4020940d, &(0x7f00000001c0)={r3}) 00:01:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)) 00:01:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}) 00:01:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045878, &(0x7f00000001c0)={r3}) 00:01:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045878, &(0x7f00000001c0)={r3}) 00:01:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045878, &(0x7f00000001c0)={r3}) 00:01:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)) 00:01:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}) (async) 00:01:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045878, &(0x7f00000001c0)={r3}) 00:01:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464c9, &(0x7f00000001c0)={r3}) 00:01:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045878, &(0x7f00000001c0)={r3}) 00:01:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:06 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xe0000000, 0x5, 0x8, 0xfffffffe, 0x5, 0x1, 0x7f, 0x6, 0x3], 0x9, 0x100000, 0x0, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000001c0)=0x4) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0xdada}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @random="8c33d5715a18", @remote}}, 0x38) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x8001, 0x0, 0xfffffffa, 0x3, 0x26e, 0x80000001, 0x6], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x2000000}) 00:01:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464c9, &(0x7f00000001c0)={r3}) 00:01:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0189436, &(0x7f00000001c0)={r3}) 00:01:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464c9, &(0x7f00000001c0)={r3}) 00:01:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0189436, &(0x7f00000001c0)={r3}) 00:01:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc020660b, &(0x7f00000001c0)={r3}) 00:01:06 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xe0000000, 0x5, 0x8, 0xfffffffe, 0x5, 0x1, 0x7f, 0x6, 0x3], 0x9, 0x100000, 0x0, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000001c0)=0x4) (async) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0xdada}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @random="8c33d5715a18", @remote}}, 0x38) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x8001, 0x0, 0xfffffffa, 0x3, 0x26e, 0x80000001, 0x6], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r2}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x2000000}) 00:01:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc020660b, &(0x7f00000001c0)={r3}) 00:01:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0189436, &(0x7f00000001c0)={r3}) 00:01:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x100, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f0000000100)={0xd2f, r5}) 00:01:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:06 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xe0000000, 0x5, 0x8, 0xfffffffe, 0x5, 0x1, 0x7f, 0x6, 0x3], 0x9, 0x100000, 0x0, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000001c0)=0x4) (async) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0xdada}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @random="8c33d5715a18", @remote}}, 0x38) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x8001, 0x0, 0xfffffffa, 0x3, 0x26e, 0x80000001, 0x6], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r2}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x2000000}) 00:01:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc020660b, &(0x7f00000001c0)={r3}) 00:01:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x100, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f0000000100)={0xd2f, r5}) 00:01:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x0, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x101, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f00000000c0)={0x0, r4}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000583d5253f5dab65c6154d006000000000000000c00000002000083"], &(0x7f0000000080)=""/162, 0x26, 0xa2, 0x1}, 0x20) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000340)) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r5, 0xc02064a4, &(0x7f0000000300)={0x2, 0x6, &(0x7f0000000240)=[0x5, 0x200, 0x40, 0x2e8, 0xe18, 0x1], &(0x7f0000000280)=[0xfffa], &(0x7f00000002c0)=[0x3ff, 0xffff, 0x3ff, 0x401, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r8, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r7}) 00:01:06 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000080)={0x0, 0x1, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x2000000}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r4, 0x0, "28a5f8", "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"}}, 0x110) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r4}}, 0xc) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.log\x00', 0x90000, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000200)={r7}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000000)={r7}) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r8, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f00000000c0)) 00:01:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x0, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x100, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f0000000100)={0xd2f, r5}) 00:01:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x101, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f00000000c0)={0x0, r4}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000583d5253f5dab65c6154d006000000000000000c00000002000083"], &(0x7f0000000080)=""/162, 0x26, 0xa2, 0x1}, 0x20) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000340)) (async) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r5, 0xc02064a4, &(0x7f0000000300)={0x2, 0x6, &(0x7f0000000240)=[0x5, 0x200, 0x40, 0x2e8, 0xe18, 0x1], &(0x7f0000000280)=[0xfffa], &(0x7f00000002c0)=[0x3ff, 0xffff, 0x3ff, 0x401, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r8, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r7}) 00:01:06 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000080)={0x0, 0x1, 0x6}) (async) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async, rerun: 64) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r4, 0x0, "28a5f8", "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"}}, 0x110) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r4}}, 0xc) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.log\x00', 0x90000, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000200)={r7}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000000)={r7}) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r8, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f00000000c0)) 00:01:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x0, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x101, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f00000000c0)={0x0, r4}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000583d5253f5dab65c6154d006000000000000000c00000002000083"], &(0x7f0000000080)=""/162, 0x26, 0xa2, 0x1}, 0x20) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000340)) (async) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r5, 0xc02064a4, &(0x7f0000000300)={0x2, 0x6, &(0x7f0000000240)=[0x5, 0x200, 0x40, 0x2e8, 0xe18, 0x1], &(0x7f0000000280)=[0xfffa], &(0x7f00000002c0)=[0x3ff, 0xffff, 0x3ff, 0x401, 0x3]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r8, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r7}) 00:01:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80000001, 0x1bc, 0xffd, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0xc80400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x6, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:06 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000080)={0x0, 0x1, 0x6}) (async) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r4, 0x0, "28a5f8", "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"}}, 0x110) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r4}}, 0xc) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.log\x00', 0x90000, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000200)={r7}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000000)={r7}) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r8, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f00000000c0)) 00:01:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000240)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001240)={r3, 0x0, "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", "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"}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:01:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80000001, 0x1bc, 0xffd, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0xc80400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x6, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) 00:01:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000100)) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080)) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0xaf, 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) (async, rerun: 32) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (rerun: 32) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000240)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001240)={r3, 0x0, "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", "9c2d1b82ca7b56b24a7e4dbac0aa8096671370313773400e809ebc8f90a3cf07a962bd44287036b634e8173a0bcac2d30876c6ea6dabd8fe6329e2a1067b89b12a232ae91d1375a4037acddc3ab21cb74ba1e17599bc4981c652377a37f9109af8bb7012afcabd8918127df2c08f4bb46f4e546c7aa15ac65d704e78ab115f69e468befd6b99a0b23d1476ba819bf1ea560d754218cf2ef8aa7764c2f577fe7600fec2bc8bd8a47e3c46c35136f01a55230cd2ed67eac0afe0afefba99a94e7318e31830385ea517e535e390469ecc027cb24e9b8bb9f82ee831838986705f9a355f0c610f66166bf5fd983d24ac328076a6b08d33f89bd62f1993222ed7b9bc66c03003c666039d3ae4ca60314217ff623c06e612ca6f3b550e147458bf9efa2e21a46e9e068050d94326a7242ba820cc46a7ec3fb559c6301475d8441801c5e94eb24c009f0a7a607984b421b612c2ff73c47611d707002cfaa1fd96c9f3901c799f888a25f1da9e5b642190c78db1a9d77b99a38abb81384150af94bb2feb0634ad506627d8fa60c4b2cc642d00930a617aa0f265528a2deb12ab9ffd9f4f9b3c88ecaa85c00e8ef0c9015aa1debfbde430ef8f5c2169929459666578e3633186f93e743a41fe32f0e2dce8bda5274b9a285b82288552b3f0ac882e688fea2b642fa1364bb3f1baac701ed36684ec1746379aab6fc4088513404d795940dea5c5d29d6ef0b4e200db8998f14c13e199b3c0e1ddf29aaeb15671dc3a9f208acea985dfb8f4c55d19de4e44bba6f2ae79dcfade0e4053b2ed3ecc7a21c3386e047e28fbd163eb8a90603c11717d403ca8cd89249815b655d03ec8843282a4aef01af58ff16889527f7ab561a8165f5aa38dabd7fccb3371785aebf4c560ce3714661ba30ada40ef69507c5c7a568e3862cd1f1bfc3e253c244365b947edde2ab7354b97b467095504fac74c5dbcb4eaf17db222a9f4078761c66b01fa6b3cd67b2ef6dfb94de6397b0f8619f6b12c53b186f373dfcf019e6f80688dee48278a8f099794f523dac2662aab2e232052e5f8a1a7477165435e681e6e6696d1dc84ead902c27250ed014e4964763d93ae64ea77b33a872fa09591ef9623413fc02cc5b1e3f940830a7fe495e6b87b06a19c3c1c451198b122ae8e9c67d4b51b40270e863e0a4425ab48af867cf1275443af15b50b5cf36c3a1ba424836ae82b3aa7fcd8d0508a9cb2f13a9a9ef9c7498107ebf601085960a3df6093ef0d2146118d7c48fc49dd7c1b0db49e020f206d809a7dbb525b5863a17104df29c1747b1c7786141a20ba06b986b5a9f787705ab0de9e7cab5c6ebb683650a6f85e16504cd06491053d479acea5e2c5e8fcc8881de5aef6c89a6a74ce1f7bccbe1bd5259c33875fd6599ab8ca6262224cccbaefdb31ec0aaa89f947ad07ae78d54b2bc370ee22808d51cd3273d24f321fc90774919a681bc8921f93ba8095a8afcaee21f7e0eae3b52874c82ed28573cc7fe0e7660cc6ee0d6621c5d5bd70911d14210af1cd016bbe7c5c4ca3dc5affbb3a3a3907586d4521e979092d305bf0d3f54a6832e875e7527a4ca84f3af62ebc74b7fb0dd35abcbaae43244a6447ab77d999e8d34fb070d6bafc1fbebdbeaed8abb413f58b6a76260a8a312e084c811924d259dc8419a6b724be44ee31d240f09b3eb5b7c4451038b335715c89c57d2d29091508a0f8940b9cc5f80de7b10608a07576aaf05d0f6801087b0b46ffcdbaae5c97bf314bc99ad275aa64386ff7283972635dff01a77bd398c0f4efa5c8dc94ba991a936737a25ef1039db20275c53207dfad616cd5a23645d4b9d599bb331a35434b0dc85ffb82df05cd368f1cc2a57b1b74a966dd5795f876679d52ed01bac70772f6165e820289fc883ce71bbf403574f0e96fa9b32fe1a0ab0bfbc965510c17bef2317008933a670a7c79c0671189f9cc1d602921d9a9ec3de0298d51feb47827d2853eb6fa314da42ff92d64f2e03b85106cf5826e6c1fcd4d5a25828dc6f43b0312a8806b2f3679de8fc87240781508f13a2402ab90f85f935656abd8c6785db39d1661c34fe86296246477f4738b1cf397fa9d65fd69d86e7aa01429e6870427395959467e2488c0e502ddda1bdc323ded9e25f235161c681799b89db58edbe4131bc736da5147a9989d4f4cee6a77b80f1294111a593aee59fbd4dc8354b012f37112ead114799c9a81b7fba25229f90391fa65f7ad2448024e3797ca184ffc093d37f24dc2d8c9bf9fb9bba9a3395e01c0e87c4a370436b5bc67ea03a5631369fdfa80615572fb3d1a936cc69eb2270dfa022727f4e7a025298b563281d9b700165196a2d7bec253f50c31e51a84eec092a4d7bf070a15c1174285fdd108877c2a71dfbb0ffc284c1560bdc7ce4ca9493392fa755d67d5ce62bebda8aafe7ed88c9e4e53df3256c112ca62d4d44bb87057c4a4e89a4da9429b3d10dd47dacd646db59984bc26961c534bc83cdc126e9d6064e377ac2dd541fe26af33f7614be3a4c2e3362448eea90734f6536c5321f44ccffca736db0c27c5c75961f70b704d1baf590a2840ebf4629b49522e450e215b731a66dc5a796a55301492628474c39d636f105ce594402b87a9fb281750a38410d0b342b17e929c337455c336a095a31fda7fe7ea06ac7aef6ecab106cfe80c3340541b2a0bb67035c8b012ab7b87097de12cf42b77bce7ce0771a72a3f9558ab490d097511af55b0d43957119a4d43952ed44844f131805777f9eebb78302f5a527f661af7f1b1676dd586c07e1951c6cc6280dae196357348b674c75fa7fa66473b90c05ce312117edafba6d0f62751f6f18cc947d7a68e1e4b625747c3e7dc21b8510980bc9fe012bd78e024171ecb931af18bbc9db33f9ec53ce99b6fe54f53dc96b79e4454e0fb6fb120f137560f1ee50acdff719eba3ae47eeba36bea80adc3e297bb8b088b82d056557e687ba1f23fef9c3f7b472f4bf0c59f7113e89099862cc4fd2df8c93c38d60c2b6c6abbea22faec491be1e822decc7c46b329b53a34b9d54301815672c37bc3fa41fbf70454ceb7c58d6e6cd71bd90baf0c826e758f513d2dc5f47e991fc1a3337ccc4af90ce5d335b069115a7773b6125a35bfdf65d87ff9ae986b5b1c5c0225752bafbca8f1625812841e2d0b87aece791c79eec14a21ff0a218ba6c98f2cc875f891081ffa531451f043f6995fea67639bfe11fefba28b5e192c8cf054e9d47235c69830b47955961d5da7e009212958a91841f081c7591e5c70e749c4bac1280d34a2330fec78b10fb7b5cfba699149fcfaf7b832b40f9bafae9781bf4b501120840469ea79b40ed7d1c85ee3c5f2decc5f199e6cc4de3ea2f7624352108215d5ccc7bdcf1a6e0562ef1da98cf701773b676221fd07130fe23b4a19ea3dca616283bf6374a5caa59dcaa9a10989e555b5165de1af47211abd82ff399f4ecf4c6ff17ed175e57d594d9e79c1371147b78d9dfd3bbd6365d1e4dd661eae144bb67a103ec74fde2c739e07360d232bea32a96b04d7d2fc19c9474dcf3fb70235d7f6fea6e2ecc1dde6d929fd4df3cfc12020429e11940b026902c47d4eaaf937aaf8c9d25a42edd30bb691257aabcc1903cd8846fe4bac6b07fd8a322ea1883a7b1e767bc2ca625d8f92a4275c102361bc8e556f33f36bd08ac38e92b0768b5fb89bf2eb84827a8bb62acdfaf9d9070e37ed413c56726b3553efe98e403f07dc11aa5f790b2a2861927d41bd9e2ced7f686428a85d756e5fc2e65d5ececa7e2f57865a4c6deefd78b2c91c1fc8058da8b5e21046a2fa3030d2311f9afff687f161f7a7554c7eefc369490973c4d81061b7dd0878ab96721275238ad650ce627eb17377bff727077f47ba06bc339bf5c7756bb544f89d93e0adca10cbb1d11d6de529aec0d28f988a87361e68a94b660eb8466b8df71f1a86d1657348bef1274c8e6a1a4e84e4cabc6c7a5c3cf005bd546d6ad82eabd93b9c6c7711ae827cd04144b389303761a4bef0262b96b9dc6f0157f50d37c5e3c96d7f1b386eb688d9985a4d96746a8607bdc0ceba28f19bdeeefab7acf1e7260dd8a5e2b6bd4ee3ae7943fe8572f1cfc80152b097ca986168608529ec50fad28446be03658a8159ee158d9c075cb74aed1f6f7a9b2d19375cc72b517e137f21fe982861619edf14559ec839e679311cae3f08a4fa7e7ec5e965bdc01145c1115c2e6560ac4dc5d55b253783a4c647c60478746540346348cfd9b919d698bcff3b1761820420a67065572af82b18b99d67397d7773b1d43ab77322fb878f7019b1b2470a355807f81ab37da9c53d03dc9c74d46fde3580d038dfd92b67550ce8499ba04ae07aeb055073ce7da8a07e8905af3a73ae1fd1ae6702ebb0b86102347a6e053df66a4dbb1247f8559bef2486c1b046a8198662854af9b99deca709758971bf854b08d3ead289e7c48a0734d5fa198e370831691bfcb147cc4484be9d3bd0ffdde3c56b209ce47ffba4ae1b5d3013d8622ac19ba4baaba4e20c3b4f231a78e3fd0c4ca3a59715621e3d0295f9adb5c3f55b5b78e6238c8c09763ceb9c52022ff2323bbd86a1fa101d3a1c70e973eeaba71d4a7ab354c48a602c023bb525c65ed2c40efee177276014654387b978ede17ea2cd2533191b393a3fce13e9ce3a6a9d1273a85b2c186bc951d40e5fdd1afc517dfa31175ad290852270d376ef12975e462f03e24eea5251ea5f7d14679156a6061415e1cdc6df84c1a13d116ab2794b3e5ff0ef1b4d2c99718af09abf01a424a59fb5b4c9ca8d64e3930f3f0d9215b9f1d87789d2d864d3eb718cd331f6eb1bc13c0e903e3ff3bff235e070726691a0e58aae395d4165d0fc7ce5635b2bf62a739ca2db21f3da8c336a92e5caaf2f11d0e04a743d15f93a5777c257e0da469d25fde7819392cd0f0f2529a3d1539779b3aa3e2660678a127c670cb49da5b3c6bcca9d26e62724fc6e34eff43031f110319fa368c9e26092bce44c29d59541f9ffdd455ba8a379df27e5658652a04f421c81e17ad2e15420b470ebc129d7de651c903891c1ead97c0f12e56a8d427ba89e43cf8d3d9156354b6936d7ee6378d892a978d3bc080428eaa65fb82bc9135ac7ad857b38f7bf0b9c7a3fa44ae82aedfd139aa7623d49b329e1a4a24d060bda7dad98d067477452a1e66facb3e102f4ee71a8b068ab03cc29f85ad66fd240cc96ad425f040dbc9c5f70bfe61facda3fc0b639163c48f11d32feb160d16168ec95c158b4221949757b58f05395105849973366946ef7b2e5e260ec4bc89f6092a6f8e8b90a7a56571643fb24bd608aa0ab1cc63bd8a733cf973a0547849d82968c28eb390b6523c9aa89911f0809931bd2cd445e146d"}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:01:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80000001, 0x1bc, 0xffd, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0xc80400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x6, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) (async) 00:01:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000100)) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080)) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0xaf, 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080)) (async) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0xaf, 0x4) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) 00:01:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) (async) 00:01:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000300)={0x2, 0x80000001, 0xbd04, 0x2, 0x81, 0x8, 0x80, 0x0, 0x40}) r6 = openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000140)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={r3, 0x0, 0x1, 0x7367, 0x4}) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000240)=0x3, &(0x7f0000000280)=0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000240)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001240)={r3, 0x0, "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", "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"}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:01:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000100)) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080)) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0xaf, 0x4) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000300)={0x2, 0x80000001, 0xbd04, 0x2, 0x81, 0x8, 0x80, 0x0, 0x40}) (async) r6 = openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000140)={r7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={r3, 0x0, 0x1, 0x7367, 0x4}) (async) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000240)=0x3, &(0x7f0000000280)=0x4) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x400000) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000080)={0x6c51, 0x5, 0xd2c, 0xffffff80, 0x0, 0x8001}) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000000)={0x3, 0x9596, 0xfffc}) 00:01:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000fbfb000f00d4aec5f2a2f8cc961b062900039e4c351c696b714ed76e8c5c86814e3be9da00000000"], 0x2a) 00:01:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0xfd63, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000080)=""/139, 0x8b, 0x0, &(0x7f0000000140)=""/35, 0x23}}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x400000) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000080)={0x6c51, 0x5, 0xd2c, 0xffffff80, 0x0, 0x8001}) (async) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000000)={0x3, 0x9596, 0xfffc}) 00:01:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000300)={0x2, 0x80000001, 0xbd04, 0x2, 0x81, 0x8, 0x80, 0x0, 0x40}) (async) r6 = openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000140)={r7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={r3, 0x0, 0x1, 0x7367, 0x4}) (async) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000240)=0x3, &(0x7f0000000280)=0x4) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000fbfb000f00d4aec5f2a2f8cc961b062900039e4c351c696b714ed76e8c5c86814e3be9da00000000"], 0x2a) 00:01:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:01:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x400000) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000080)={0x6c51, 0x5, 0xd2c, 0xffffff80, 0x0, 0x8001}) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000000)={0x3, 0x9596, 0xfffc}) syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x400000) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000080)={0x6c51, 0x5, 0xd2c, 0xffffff80, 0x0, 0x8001}) (async) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000000)={0x3, 0x9596, 0xfffc}) (async) 00:01:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) r4 = syz_open_dev$dri(&(0x7f0000000280), 0xfd63, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000002c0)) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000080)=""/139, 0x8b, 0x0, &(0x7f0000000140)=""/35, 0x23}}, 0x10) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000fbfb000f00d4aec5f2a2f8cc961b062900039e4c351c696b714ed76e8c5c86814e3be9da00000000"], 0x2a) 00:01:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r1}) 00:01:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:01:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{0x0, 0x3, 0x1ff, 0x37f, 0x4a68, 0xffffffffffffffff, 0x5, 0xffffffff, 0x9, 0x40, 0x8000, 0x8, 0x8, 0x100, 0x401}, 0x8, [0x0]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000140)={0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)) 00:01:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x2000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20000000}) 00:01:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r1}) 00:01:07 executing program 4: ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x101, 0xff00, 0x2ca8f948}) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000080)=0xf9, &(0x7f00000000c0)=0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x1, 0xf1, 0xfffff001, 0x2, 0x4], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, r4}}, 0x18) 00:01:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:01:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) r4 = syz_open_dev$dri(&(0x7f0000000280), 0xfd63, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000080)=""/139, 0x8b, 0x0, &(0x7f0000000140)=""/35, 0x23}}, 0x10) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x2000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20000000}) 00:01:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{0x0, 0x3, 0x1ff, 0x37f, 0x4a68, 0xffffffffffffffff, 0x5, 0xffffffff, 0x9, 0x40, 0x8000, 0x8, 0x8, 0x100, 0x401}, 0x8, [0x0]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000140)={0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{0x0, 0x3, 0x1ff, 0x37f, 0x4a68, 0xffffffffffffffff, 0x5, 0xffffffff, 0x9, 0x40, 0x8000, 0x8, 0x8, 0x100, 0x401}, 0x8, [0x0]}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x0) (async) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000140)={0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)) (async) 00:01:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) 00:01:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r1}) 00:01:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x2000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20000000}) 00:01:07 executing program 4: ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x101, 0xff00, 0x2ca8f948}) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000080)=0xf9, &(0x7f00000000c0)=0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x1, 0xf1, 0xfffff001, 0x2, 0x4], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, r4}}, 0x18) 00:01:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)) 00:01:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{0x0, 0x3, 0x1ff, 0x37f, 0x4a68, 0xffffffffffffffff, 0x5, 0xffffffff, 0x9, 0x40, 0x8000, 0x8, 0x8, 0x100, 0x401}, 0x8, [0x0]}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000140)={0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)) 00:01:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) 00:01:07 executing program 2: ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffffffb, 0x9, 0x3}) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) 00:01:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)) 00:01:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)) 00:01:07 executing program 4: ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x101, 0xff00, 0x2ca8f948}) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000080)=0xf9, &(0x7f00000000c0)=0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x1, 0xf1, 0xfffff001, 0x2, 0x4], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, r4}}, 0x18) (rerun: 64) 00:01:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000180)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000240)={0x1000, "5e71d54bfa421b016d788ce9811297d5cd1393487c17f33bbb1266662fb84bbe"}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1f}, [@map_fd={0x18, 0x8, 0x1, 0x0, r3}, @jmp={0x5, 0x1, 0xa, 0x6, 0x0, 0xfffffffffffffe49, 0x10}, @alu={0x7, 0x0, 0xa, 0xa, 0x2, 0x1, 0x8}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x6e}, @alu={0x4, 0x0, 0x1, 0x14, 0x2, 0xc, 0xfffffffffffffffc}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x0, 0x1, 0x7, 0xa, 0x0, 0x4}]}, &(0x7f0000000500)='syzkaller\x00', 0x635f, 0xf2, &(0x7f0000000540)=""/242, 0x40f00, 0x4, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000640)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x5, 0x4}, 0x10}, 0x80) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000740)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000100)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r4}) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x6, 0x6, 0x404, 0x0, 0x0}) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000440)={""/32, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}]}) openat$incfs(r9, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f00000001c0)={r8}) 00:01:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)) 00:01:07 executing program 2: ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffffffb, 0x9, 0x3}) (async) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) 00:01:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) 00:01:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)) 00:01:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)) 00:01:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4142) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000080)) 00:01:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000180)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000240)={0x1000, "5e71d54bfa421b016d788ce9811297d5cd1393487c17f33bbb1266662fb84bbe"}) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1f}, [@map_fd={0x18, 0x8, 0x1, 0x0, r3}, @jmp={0x5, 0x1, 0xa, 0x6, 0x0, 0xfffffffffffffe49, 0x10}, @alu={0x7, 0x0, 0xa, 0xa, 0x2, 0x1, 0x8}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x6e}, @alu={0x4, 0x0, 0x1, 0x14, 0x2, 0xc, 0xfffffffffffffffc}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x0, 0x1, 0x7, 0xa, 0x0, 0x4}]}, &(0x7f0000000500)='syzkaller\x00', 0x635f, 0xf2, &(0x7f0000000540)=""/242, 0x40f00, 0x4, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000640)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x5, 0x4}, 0x10}, 0x80) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000740)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000100)={r6}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r4}) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x6, 0x6, 0x404, 0x0, 0x0}) (async) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000440)={""/32, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}]}) openat$incfs(r9, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f00000001c0)={r8}) 00:01:08 executing program 2: ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffffffb, 0x9, 0x3}) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2000000}) 00:01:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4142) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000080)) 00:01:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000080)={0x6, 0x1ff, 0x6, 0xfbfbfbfb}) 00:01:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000180)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000240)={0x1000, "5e71d54bfa421b016d788ce9811297d5cd1393487c17f33bbb1266662fb84bbe"}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1f}, [@map_fd={0x18, 0x8, 0x1, 0x0, r3}, @jmp={0x5, 0x1, 0xa, 0x6, 0x0, 0xfffffffffffffe49, 0x10}, @alu={0x7, 0x0, 0xa, 0xa, 0x2, 0x1, 0x8}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x6e}, @alu={0x4, 0x0, 0x1, 0x14, 0x2, 0xc, 0xfffffffffffffffc}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x0, 0x1, 0x7, 0xa, 0x0, 0x4}]}, &(0x7f0000000500)='syzkaller\x00', 0x635f, 0xf2, &(0x7f0000000540)=""/242, 0x40f00, 0x4, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000640)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x5, 0x4}, 0x10}, 0x80) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000740)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000100)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r4}) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x6, 0x6, 0x404, 0x0, 0x0}) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000440)={""/32, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}]}) openat$incfs(r9, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f00000001c0)={r8}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000180)={r1}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000240)={0x1000, "5e71d54bfa421b016d788ce9811297d5cd1393487c17f33bbb1266662fb84bbe"}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1f}, [@map_fd={0x18, 0x8, 0x1, 0x0, r3}, @jmp={0x5, 0x1, 0xa, 0x6, 0x0, 0xfffffffffffffe49, 0x10}, @alu={0x7, 0x0, 0xa, 0xa, 0x2, 0x1, 0x8}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x6e}, @alu={0x4, 0x0, 0x1, 0x14, 0x2, 0xc, 0xfffffffffffffffc}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x0, 0x1, 0x7, 0xa, 0x0, 0x4}]}, &(0x7f0000000500)='syzkaller\x00', 0x635f, 0xf2, &(0x7f0000000540)=""/242, 0x40f00, 0x4, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000640)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x5, 0x4}, 0x10}, 0x80) (async) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000740)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000100)={r6}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r4}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x100) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x6, 0x6, 0x404}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000440)={""/32, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}]}) (async) openat$incfs(r9, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f00000001c0)={r8}) (async) 00:01:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r1}) 00:01:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000080)={0x6, 0x1ff, 0x6, 0xfbfbfbfb}) 00:01:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4142) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4142) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000080)) (async) 00:01:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc020660b, &(0x7f00000001c0)={r3}) 00:01:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x400c, 0x8, 0xffa, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000080)={0x81, 0x43e, 0x80, 0x1, 0x9, 0x2}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000080)={0x6, 0x1ff, 0x6, 0xfbfbfbfb}) 00:01:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x0, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x3ff, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) r6 = openat$incfs(r3, &(0x7f0000001240)='.log\x00', 0x100, 0x10) write$apparmor_exec(r6, &(0x7f0000001280)={'stack ', '\x00'}, 0x7) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 00:01:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x100, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f0000000100)={0xd2f, r5}) 00:01:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0189436, &(0x7f00000001c0)={r3}) 00:01:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x400c, 0x8, 0xffa, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000080)={0x81, 0x43e, 0x80, 0x1, 0x9, 0x2}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x400c, 0x8, 0xffa}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000080)={0x81, 0x43e, 0x80, 0x1, 0x9, 0x2}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x0, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x5, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x3ff, 0x8, 0xfff, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async, rerun: 64) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (rerun: 64) r3 = openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) (async, rerun: 32) r6 = openat$incfs(r3, &(0x7f0000001240)='.log\x00', 0x100, 0x10) (rerun: 32) write$apparmor_exec(r6, &(0x7f0000001280)={'stack ', '\x00'}, 0x7) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 00:01:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045878, &(0x7f00000001c0)={r3}) 00:01:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x0, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x400c, 0x8, 0xffa, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000080)={0x81, 0x43e, 0x80, 0x1, 0x9, 0x2}) (async, rerun: 64) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (rerun: 64) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async, rerun: 64) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x5, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x200) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x5, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x4020940d, &(0x7f00000001c0)={r3}) 00:01:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x3ff, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) (async) r6 = openat$incfs(r3, &(0x7f0000001240)='.log\x00', 0x100, 0x10) write$apparmor_exec(r6, &(0x7f0000001280)={'stack ', '\x00'}, 0x7) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 00:01:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x5, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x200) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x5, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x4020940d, &(0x7f00000001c0)={r3}) 00:01:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000100)=0xffff, &(0x7f0000000140)=0x2) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000180)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000240)) 00:01:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000000c0)={0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r4, 0x20, &(0x7f0000000100)={&(0x7f0000000080)=""/113, 0x71, 0x0, &(0x7f0000000240)=""/255, 0xff}}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x4020940d, &(0x7f00000001c0)={r3}) 00:01:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000000c0)={0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000000c0)={0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) 00:01:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x0, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000100)=0xffff, &(0x7f0000000140)=0x2) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000180)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000240)) 00:01:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r4, 0x20, &(0x7f0000000100)={&(0x7f0000000080)=""/113, 0x71, 0x0, &(0x7f0000000240)=""/255, 0xff}}, 0x10) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x0, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) (fail_nth: 1) 00:01:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x0, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (rerun: 64) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000000c0)={0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}]}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r4, 0x20, &(0x7f0000000100)={&(0x7f0000000080)=""/113, 0x71, 0x0, &(0x7f0000000240)=""/255, 0xff}}, 0x10) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000100)=0xffff, &(0x7f0000000140)=0x2) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000180)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async, rerun: 64) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (rerun: 64) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000240)) 00:01:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x0, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x5, 0x8000, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:09 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r1 = openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8001, 0x408, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffc, 0x10002) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000180)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x9, 0x7d, 0x40000007, 0x0, 0x0}) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r8, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r8, 0x641e) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000001c0)={r7}) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r9, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r9, 0x641e) write$khugepaged_scan(r1, &(0x7f0000000100), 0x8) 00:01:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000000c0)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000080)={0x3ff, 0x1, 0x20, 0xf4, 0xb9, 0x3f}, 0xc) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x2, &(0x7f0000000140)={r1}) 00:01:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) (fail_nth: 1) 00:01:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x5, 0x8000, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:01:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000000c0)) (async, rerun: 32) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000080)={0x3ff, 0x1, 0x20, 0xf4, 0xb9, 0x3f}, 0xc) (rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5421, &(0x7f0000000140)={r1}) 00:01:09 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r1 = openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8001, 0x408, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffc, 0x10002) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000180)={r6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x9, 0x7d, 0x40000007, 0x0, 0x0}) (async) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r8, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_SET_MASTER(r8, 0x641e) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000001c0)={r7}) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r9, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_SET_MASTER(r9, 0x641e) (async) write$khugepaged_scan(r1, &(0x7f0000000100), 0x8) 00:01:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x5, 0x8000, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 00:01:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000000c0)) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000080)={0x3ff, 0x1, 0x20, 0xf4, 0xb9, 0x3f}, 0xc) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:01:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), 0xffffffffffffffff, 0x2}}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r4, 0x0, "28a5f8", "c6d5c7989c0226030e2a519d433172399c086787ea48bead1675199df6ce8eb10caeb3c032f8b332b2afc0db5a54731c7d561927c04e4e26e37e1475f810d7a48846f12cc2f59f5f236d055e49ffc794483fcf62109c0fb8ca70dfdb0ec6aaaac17d3f230f315e379550799910e5a0d7f690500669464b50fef8547142effae795f48e735b6f39b83bedafac3cf4c36bf263651b0a7a7418c19b5910864911d186e1fde3e0062c3a1139d8b3b4d999aae758e7be95714d053531b6c5d5ffd9681bffdf52550000471d3abc31a4e44e555316e3bcd9f1ab681174ea38d1fbac0f393b190f1161f344745cb93dac101fe15c68bda62b113eed7ed3c8108a2c4002"}}, 0x110) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x200, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r4, r5}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r6}) 00:01:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5450, &(0x7f0000000140)={r1}) 00:01:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x2, &(0x7f0000000040)={r2}) 00:01:09 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r1 = openat$incfs(r0, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async, rerun: 32) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8001, 0x408, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffc, 0x10002) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000180)={r6}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x9, 0x7d, 0x40000007, 0x0, 0x0}) (async, rerun: 64) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r8, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_SET_MASTER(r8, 0x641e) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000001c0)={r7}) (async) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r9, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_SET_MASTER(r9, 0x641e) write$khugepaged_scan(r1, &(0x7f0000000100), 0x8) 00:01:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r2, 0x80000}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000080)={0x0, 0x7fffffff, 0x3f, 0x5, 0x1, 0x1}) 00:01:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:01:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5451, &(0x7f0000000140)={r1}) 00:01:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000000240)='.pending_reads\x00', 0xd0000, 0x190) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x2000008, 0x81, 0xfff, 0x0, 0x0}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x428000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f0000000100)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) openat$incfs(0xffffffffffffffff, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="280000004e000000000101000000eaff0000000000000081040000000000006d8800f5aaac715c054d078c000000000000000000"], &(0x7f0000000380), 0x1400) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r8) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5421, &(0x7f0000000040)={r2}) 00:01:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), 0xffffffffffffffff, 0x2}}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r4, 0x0, "28a5f8", "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"}}, 0x110) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x200, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r4, r5}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r6}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), 0xffffffffffffffff, 0x2}}, 0x18) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r4, 0x0, "28a5f8", "c6d5c7989c0226030e2a519d433172399c086787ea48bead1675199df6ce8eb10caeb3c032f8b332b2afc0db5a54731c7d561927c04e4e26e37e1475f810d7a48846f12cc2f59f5f236d055e49ffc794483fcf62109c0fb8ca70dfdb0ec6aaaac17d3f230f315e379550799910e5a0d7f690500669464b50fef8547142effae795f48e735b6f39b83bedafac3cf4c36bf263651b0a7a7418c19b5910864911d186e1fde3e0062c3a1139d8b3b4d999aae758e7be95714d053531b6c5d5ffd9681bffdf52550000471d3abc31a4e44e555316e3bcd9f1ab681174ea38d1fbac0f393b190f1161f344745cb93dac101fe15c68bda62b113eed7ed3c8108a2c4002"}}, 0x110) (async) openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x200, 0x20) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r4, r5}}, 0x18) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r6}) (async) 00:01:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r2, 0x80000}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000080)={0x0, 0x7fffffff, 0x3f, 0x5, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r2, 0x80000}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000080)={0x0, 0x7fffffff, 0x3f, 0x5, 0x1, 0x1}) (async) 00:01:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)) 00:01:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5452, &(0x7f0000000140)={r1}) 00:01:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000000240)='.pending_reads\x00', 0xd0000, 0x190) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x2000008, 0x81, 0xfff, 0x0, 0x0}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x428000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f0000000100)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) openat$incfs(0xffffffffffffffff, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="280000004e000000000101000000eaff0000000000000081040000000000006d8800f5aaac715c054d078c000000000000000000"], &(0x7f0000000380), 0x1400) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r8) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r3, &(0x7f0000000240)='.pending_reads\x00', 0xd0000, 0x190) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x2000008, 0x81, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x428000) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f0000000100)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) (async) openat$incfs(0xffffffffffffffff, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="280000004e000000000101000000eaff0000000000000081040000000000006d8800f5aaac715c054d078c000000000000000000"], &(0x7f0000000380), 0x1400) (async) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r8) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) 00:01:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5450, &(0x7f0000000040)={r2}) 00:01:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5460, &(0x7f0000000140)={r1}) 00:01:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r2, 0x80000}) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000080)={0x0, 0x7fffffff, 0x3f, 0x5, 0x1, 0x1}) 00:01:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)) 00:01:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), 0xffffffffffffffff, 0x2}}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r4, 0x0, "28a5f8", "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"}}, 0x110) (async) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x200, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r4, r5}}, 0x18) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r6}) 00:01:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5451, &(0x7f0000000040)={r2}) 00:01:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x40049409, &(0x7f0000000140)={r1}) 00:01:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000000240)='.pending_reads\x00', 0xd0000, 0x190) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x2000008, 0x81, 0xfff, 0x0, 0x0}) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) (async) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x428000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f0000000100)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) (async) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) openat$incfs(0xffffffffffffffff, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="280000004e000000000101000000eaff0000000000000081040000000000006d8800f5aaac715c054d078c000000000000000000"], &(0x7f0000000380), 0x1400) (async) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r8) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)) 00:01:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x4020940d, &(0x7f0000000140)={r1}) 00:01:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x9, 0x40, 0xfff, 0x0, 0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000080)={0x9, 0x400, 0xe, 0x7}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000000c0)={0xffffffff, 0x9, 0x1ff, 0xe0e0e0e0}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r7, 0xc02064a4, &(0x7f0000000380)={0xd5, 0x4, &(0x7f00000002c0)=[0x5, 0x1000, 0x81, 0x7f], &(0x7f0000000300)=[0x401, 0x4, 0x3, 0xb672, 0x200, 0x8, 0x8], &(0x7f0000000340)=[0x3ff, 0x6, 0x87f, 0x0, 0xf800]}) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x400000) ioctl$DRM_IOCTL_SG_ALLOC(r8, 0xc0106438, &(0x7f0000000140)={0xe7}) 00:01:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0xc0400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5452, &(0x7f0000000040)={r2}) 00:01:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x9, 0x40, 0xfff, 0x0, 0x0}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000080)={0x9, 0x400, 0xe, 0x7}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000000c0)={0xffffffff, 0x9, 0x1ff, 0xe0e0e0e0}) (async) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r7, 0xc02064a4, &(0x7f0000000380)={0xd5, 0x4, &(0x7f00000002c0)=[0x5, 0x1000, 0x81, 0x7f], &(0x7f0000000300)=[0x401, 0x4, 0x3, 0xb672, 0x200, 0x8, 0x8], &(0x7f0000000340)=[0x3ff, 0x6, 0x87f, 0x0, 0xf800]}) (async) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x400000) ioctl$DRM_IOCTL_SG_ALLOC(r8, 0xc0106438, &(0x7f0000000140)={0xe7}) 00:01:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5460, &(0x7f0000000140)={r1}) 00:01:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0xc0400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0xc0400) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) 00:01:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045878, &(0x7f0000000140)={r1}) 00:01:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5460, &(0x7f0000000040)={r2}) 00:01:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)) 00:01:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x9, 0x40, 0xfff, 0x0, 0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000080)={0x9, 0x400, 0xe, 0x7}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000000c0)={0xffffffff, 0x9, 0x1ff, 0xe0e0e0e0}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r7, 0xc02064a4, &(0x7f0000000380)={0xd5, 0x4, &(0x7f00000002c0)=[0x5, 0x1000, 0x81, 0x7f], &(0x7f0000000300)=[0x401, 0x4, 0x3, 0xb672, 0x200, 0x8, 0x8], &(0x7f0000000340)=[0x3ff, 0x6, 0x87f, 0x0, 0xf800]}) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x400000) ioctl$DRM_IOCTL_SG_ALLOC(r8, 0xc0106438, &(0x7f0000000140)={0xe7}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x9, 0x40, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000080)={0x9, 0x400, 0xe, 0x7}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000000c0)={0xffffffff, 0x9, 0x1ff, 0xe0e0e0e0}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r7, 0xc02064a4, &(0x7f0000000380)={0xd5, 0x4, &(0x7f00000002c0)=[0x5, 0x1000, 0x81, 0x7f], &(0x7f0000000300)=[0x401, 0x4, 0x3, 0xb672, 0x200, 0x8, 0x8], &(0x7f0000000340)=[0x3ff, 0x6, 0x87f, 0x0, 0xf800]}) (async) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x400000) (async) ioctl$DRM_IOCTL_SG_ALLOC(r8, 0xc0106438, &(0x7f0000000140)={0xe7}) (async) 00:01:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x40049409, &(0x7f0000000040)={r2}) 00:01:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0xc0400) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045878, &(0x7f0000000140)={r1}) 00:01:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x4020940d, &(0x7f0000000040)={r2}) 00:01:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:01:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464c9, &(0x7f0000000140)={r1}) 00:01:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x4, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.log\x00', 0x6000, 0x53) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000340)={0x0, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000003c0)={0x4, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000400)={0x5f47000000000, r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000380)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x8, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x1, 0x0, 0x1000, 0x6, 0x57], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:01:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045878, &(0x7f0000000040)={r2}) 00:01:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x4, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5421, &(0x7f0000000140)={r1}) 00:01:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x4, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.log\x00', 0x6000, 0x53) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000340)={0x0, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000003c0)={0x4, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000400)={0x5f47000000000, r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000380)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x8, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x1, 0x0, 0x1000, 0x6, 0x57], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x4, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.log\x00', 0x6000, 0x53) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000340)={0x0, 0x0, 0x10000}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000003c0)={0x4, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000400)={0x5f47000000000, r4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000380)) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x8, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x1, 0x0, 0x1000, 0x6, 0x57], 0x5, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r5}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) (async) 00:01:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0189436, &(0x7f0000000140)={r1}) 00:01:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045878, &(0x7f0000000040)={r2}) 00:01:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x4, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc020660b, &(0x7f0000000140)={r1}) 00:01:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffff3be8, 0x80801) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x4, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.log\x00', 0x6000, 0x53) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000340)={0x0, 0x0, 0x10000}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000003c0)={0x4, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000400)={0x5f47000000000, r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000380)) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x8, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x1, 0x0, 0x1000, 0x6, 0x57], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:01:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x2, &(0x7f0000000140)={r1}) 00:01:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464c9, &(0x7f0000000040)={r2}) 00:01:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x4, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x4, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x42, 0x3fe, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000180)={{0x0, 0x3ff, 0x5, 0x2, 0xe170, 0x261f, 0x8, 0x80000011, 0x14, 0x8001, 0x9, 0x9, 0xec, 0x3, 0x1}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:01:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x8, 0xd9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x8000000000000000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffff3be8, 0x80801) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffff3be8, 0x80801) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0189436, &(0x7f0000000040)={r2}) 00:01:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) (fail_nth: 1) 00:01:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000080)={0x80000000, 0x9, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x42, 0x3fe, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000180)={{0x0, 0x3ff, 0x5, 0x2, 0xe170, 0x261f, 0x8, 0x80000011, 0x14, 0x8001, 0x9, 0x9, 0xec, 0x3, 0x1}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:01:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x8, 0xd9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x8000000000000000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc020660b, &(0x7f0000000040)={r2}) 00:01:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffff3be8, 0x80801) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000080)={0x80000000, 0x9, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x8, 0xd9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x8000000000000000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x8, 0xd9}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x8000000000000000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x42, 0x3fe, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000180)={{0x0, 0x3ff, 0x5, 0x2, 0xe170, 0x261f, 0x8, 0x80000011, 0x14, 0x8001, 0x9, 0x9, 0xec, 0x3, 0x1}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r4}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x42, 0x3fe}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000180)={{0x0, 0x3ff, 0x5, 0x2, 0xe170, 0x261f, 0x8, 0x80000011, 0x14, 0x8001, 0x9, 0x9, 0xec, 0x3, 0x1}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) 00:01:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x100000000, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x81, 0xe0e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 00:01:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x2, &(0x7f00000001c0)={r2}) 00:01:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000080)={0x80000000, 0x9, 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)={0xffff, "3a0ec6"}, 0x6) 00:01:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x81, 0x5, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r4}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80000001, 0x81, 0xffc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0xda9, 0x5, 0x6, 0x10000, 0x6, 0xb751, 0x1, 0x0, 0x400, 0x9, 0x5a6b}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r6, 0xc01064c1, &(0x7f0000000180)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:01:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x100000000, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x81, 0xe0e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 00:01:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000080)) 00:01:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5421, &(0x7f00000001c0)={r2}) 00:01:11 executing program 5: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000100)=0x63, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)={0xffff, "3a0ec6"}, 0x6) 00:01:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x81, 0x5, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r4}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80000001, 0x81, 0xffc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0xda9, 0x5, 0x6, 0x10000, 0x6, 0xb751, 0x1, 0x0, 0x400, 0x9, 0x5a6b}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r6, 0xc01064c1, &(0x7f0000000180)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x81, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r4}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80000001, 0x81, 0xffc}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0xda9, 0x5, 0x6, 0x10000, 0x6, 0xb751, 0x1, 0x0, 0x400, 0x9, 0x5a6b}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r6, 0xc01064c1, &(0x7f0000000180)={r7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) (async) 00:01:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x100000000, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x81, 0xe0e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 00:01:11 executing program 5: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000100)=0x63, 0x2) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async, rerun: 32) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (rerun: 32) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {}]}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5450, &(0x7f00000001c0)={r2}) 00:01:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000080)) 00:01:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)={0xffff, "3a0ec6"}, 0x6) 00:01:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5451, &(0x7f00000001c0)={r2}) 00:01:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x1, 0xff, 0xacd, 0x4, 0x5, 0x8, 0x8, 0x400, 0xfffff001}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x7, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 00:01:11 executing program 5: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000100)=0x63, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000100)=0x63, 0x2) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {}]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x81, 0x5, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r4}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80000001, 0x81, 0xffc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0xda9, 0x5, 0x6, 0x10000, 0x6, 0xb751, 0x1, 0x0, 0x400, 0x9, 0x5a6b}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r6, 0xc01064c1, &(0x7f0000000180)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x81, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r4}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80000001, 0x81, 0xffc}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0xda9, 0x5, 0x6, 0x10000, 0x6, 0xb751, 0x1, 0x0, 0x400, 0x9, 0x5a6b}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r6, 0xc01064c1, &(0x7f0000000180)={r7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) (async) 00:01:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000080)) 00:01:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f00000001c0)={0xffffffffffffffff, 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x3, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x100, 0x2000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000200)={r5}) r7 = openat$incfs(r3, &(0x7f0000000140)='.pending_reads\x00', 0x800, 0x188) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f0000000200)={r9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000100)={r9}) 00:01:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5452, &(0x7f00000001c0)={r2}) 00:01:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x1, 0xff, 0xacd, 0x4, 0x5, 0x8, 0x8, 0x400, 0xfffff001}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x7, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 00:01:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000180)={0x0, 0x7, 0x80000000, 0x28b6, 0x65, 0x9, 0xffffff80, 0x5, 0x40, 0x1, 0x40000000, 0x56}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000140)={0xa08e, 0x2, &(0x7f0000000080)=[0x1, 0xf4a], &(0x7f00000000c0)=[0x8, 0x401, 0x80, 0x3], &(0x7f0000000100)=[0x7fff, 0x1, 0x8]}) 00:01:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000200)={0x5, 0x57, 0x5, 0x5, 0x10, 0x3f}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0xfff, 0x9, 0x3}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0xcc1, 0x7}) 00:01:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f00000001c0)={0xffffffffffffffff, 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x3, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x100, 0x2000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000200)={r5}) r7 = openat$incfs(r3, &(0x7f0000000140)='.pending_reads\x00', 0x800, 0x188) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f0000000200)={r9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000100)={r9}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f00000001c0)={0xffffffffffffffff, 0x5, 0x1}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x10) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x3, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x100, 0x2000) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000200)={r5}) (async) openat$incfs(r3, &(0x7f0000000140)='.pending_reads\x00', 0x800, 0x188) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f0000000200)={r9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000100)={r9}) (async) 00:01:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000080)={0x6, 0x1, 0x0, 0xffffffff, 0x1}) syz_open_dev$dri(&(0x7f00000000c0), 0x9, 0x608441) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x1, 0xff, 0xacd, 0x4, 0x5, 0x8, 0x8, 0x400, 0xfffff001}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x7, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 00:01:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5460, &(0x7f00000001c0)={r2}) 00:01:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000180)={0x0, 0x7, 0x80000000, 0x28b6, 0x65, 0x9, 0xffffff80, 0x5, 0x40, 0x1, 0x40000000, 0x56}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000140)={0xa08e, 0x2, &(0x7f0000000080)=[0x1, 0xf4a], &(0x7f00000000c0)=[0x8, 0x401, 0x80, 0x3], &(0x7f0000000100)=[0x7fff, 0x1, 0x8]}) 00:01:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000080)={0x6, 0x1, 0x0, 0xffffffff, 0x1}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x9, 0x608441) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000200)={0x5, 0x57, 0x5, 0x5, 0x10, 0x3f}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0xfff, 0x9, 0x3}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0xcc1, 0x7}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000200)={0x5, 0x57, 0x5, 0x5, 0x10, 0x3f}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0xfff, 0x9, 0x3}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0xcc1, 0x7}) (async) 00:01:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f00000001c0)={0xffffffffffffffff, 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x3, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x100, 0x2000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000200)={r5}) r7 = openat$incfs(r3, &(0x7f0000000140)='.pending_reads\x00', 0x800, 0x188) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f0000000200)={r9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000100)={r9}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f00000001c0)={0xffffffffffffffff, 0x5, 0x1}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x10) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x3, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x100, 0x2000) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000200)={r5}) (async) openat$incfs(r3, &(0x7f0000000140)='.pending_reads\x00', 0x800, 0x188) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f0000000200)={r9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000100)={r9}) (async) 00:01:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000180)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) 00:01:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x40049409, &(0x7f00000001c0)={r2}) 00:01:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000180)={0x0, 0x7, 0x80000000, 0x28b6, 0x65, 0x9, 0xffffff80, 0x5, 0x40, 0x1, 0x40000000, 0x56}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000140)={0xa08e, 0x2, &(0x7f0000000080)=[0x1, 0xf4a], &(0x7f00000000c0)=[0x8, 0x401, 0x80, 0x3], &(0x7f0000000100)=[0x7fff, 0x1, 0x8]}) 00:01:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000180)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) (async) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000180)={r4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5}) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) (async) 00:01:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000200)={0x5, 0x57, 0x5, 0x5, 0x10, 0x3f}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0xfff, 0x9, 0x3}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0xcc1, 0x7}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000200)={0x5, 0x57, 0x5, 0x5, 0x10, 0x3f}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0xfff, 0x9, 0x3}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0xcc1, 0x7}) (async) 00:01:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000080)={0x6, 0x1, 0x0, 0xffffffff, 0x1}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x9, 0x608441) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x4020940d, &(0x7f00000001c0)={r2}) 00:01:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffff07, 0x80100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x4, 0x5, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0xeb80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x103000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x204000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x4, 0x9, 0x46], 0x3, 0x800}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000180)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) (async) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000180)={r4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5}) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) (async) 00:01:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045878, &(0x7f00000001c0)={r2}) 00:01:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffff07, 0x80100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x4, 0x5, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0xeb80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x103000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffff07, 0x80100) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x4, 0x5, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r2}) (async) syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0xeb80) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) (async) syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x103000) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) 00:01:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x204000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x4, 0x9, 0x46], 0x3, 0x800}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:12 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"8650b90dc7fb94a1952ec20a623d5ec1", 0x0, 0x0, {0x2, 0x5}, {0x9, 0x9}, 0xfffffffffffff8bf, [0xaaf, 0x1000, 0x7, 0x4, 0xffffffff, 0x6, 0x7, 0x4, 0xfffffffffffffffb, 0x1200000, 0x40, 0x100000000, 0xfff, 0x5, 0x10001, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000240)={"a35add6019c5919c360cb1ed38197120", r0, 0x0, {0x0, 0xfb1}, {0xfffffffffffffffd, 0x8}, 0xebd6, [0x9, 0x81, 0x8001, 0xfff, 0x1, 0x100, 0x0, 0x3f, 0x0, 0x8, 0x1, 0x2, 0x7, 0x81, 0x2, 0x1]}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f00000000c0)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x201) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x10400) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000380)={0x0, 0x4, 0x7ff, 0x8, 0x7, 0x3, 0x8000, 0x4, 0x8000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 00:01:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x240200) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x8663, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000200)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000100)={r8}) 00:01:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045878, &(0x7f00000001c0)={r2}) 00:01:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffff07, 0x80100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x4, 0x5, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0xeb80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x103000) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x4, 0x9, 0x46], 0x3, 0x800}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) (rerun: 64) 00:01:12 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"8650b90dc7fb94a1952ec20a623d5ec1", 0x0, 0x0, {0x2, 0x5}, {0x9, 0x9}, 0xfffffffffffff8bf, [0xaaf, 0x1000, 0x7, 0x4, 0xffffffff, 0x6, 0x7, 0x4, 0xfffffffffffffffb, 0x1200000, 0x40, 0x100000000, 0xfff, 0x5, 0x10001, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000240)={"a35add6019c5919c360cb1ed38197120", r0, 0x0, {0x0, 0xfb1}, {0xfffffffffffffffd, 0x8}, 0xebd6, [0x9, 0x81, 0x8001, 0xfff, 0x1, 0x100, 0x0, 0x3f, 0x0, 0x8, 0x1, 0x2, 0x7, 0x81, 0x2, 0x1]}) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) (async) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f00000000c0)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x201) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000400)={r4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x10400) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000380)={0x0, 0x4, 0x7ff, 0x8, 0x7, 0x3, 0x8000, 0x4, 0x8000}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 00:01:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x204000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x204000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x240200) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x8663, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000200)={r8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000100)={r8}) 00:01:12 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"8650b90dc7fb94a1952ec20a623d5ec1", 0x0, 0x0, {0x2, 0x5}, {0x9, 0x9}, 0xfffffffffffff8bf, [0xaaf, 0x1000, 0x7, 0x4, 0xffffffff, 0x6, 0x7, 0x4, 0xfffffffffffffffb, 0x1200000, 0x40, 0x100000000, 0xfff, 0x5, 0x10001, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000240)={"a35add6019c5919c360cb1ed38197120", r0, 0x0, {0x0, 0xfb1}, {0xfffffffffffffffd, 0x8}, 0xebd6, [0x9, 0x81, 0x8001, 0xfff, 0x1, 0x100, 0x0, 0x3f, 0x0, 0x8, 0x1, 0x2, 0x7, 0x81, 0x2, 0x1]}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f00000000c0)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x201) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x10400) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000380)={0x0, 0x4, 0x7ff, 0x8, 0x7, 0x3, 0x8000, 0x4, 0x8000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"8650b90dc7fb94a1952ec20a623d5ec1", 0x0, 0x0, {0x2, 0x5}, {0x9, 0x9}, 0xfffffffffffff8bf, [0xaaf, 0x1000, 0x7, 0x4, 0xffffffff, 0x6, 0x7, 0x4, 0xfffffffffffffffb, 0x1200000, 0x40, 0x100000000, 0xfff, 0x5, 0x10001, 0x5]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000240)={"a35add6019c5919c360cb1ed38197120", r0, 0x0, {0x0, 0xfb1}, {0xfffffffffffffffd, 0x8}, 0xebd6, [0x9, 0x81, 0x8001, 0xfff, 0x1, 0x100, 0x0, 0x3f, 0x0, 0x8, 0x1, 0x2, 0x7, 0x81, 0x2, 0x1]}) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) (async) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f00000000c0)={r2}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x201) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000400)={r4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x10400) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000380)={0x0, 0x4, 0x7ff, 0x8, 0x7, 0x3, 0x8000, 0x4, 0x8000}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) (async) 00:01:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xffc}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f00000001c0)={0x0, 0x0, 0xfff, 0x7fffffffffffffff, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r2}) 00:01:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464c9, &(0x7f00000001c0)={r2}) 00:01:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x8, 0x401, 0x0, 0x1, 0x800, 0xffffffffffffffff, 0xed1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0xfe, 0x5, 0x4000002, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, @local, 0x10, 0x7, 0x1, 0x3ff}}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r8 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r9, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r10 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r10, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@alu={0x7, 0x0, 0x7, 0x5, 0xb, 0x40, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x12}, @generic={0x20, 0x4, 0xe, 0x3ff, 0x8}, @func, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}, @map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfff}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0x2, &(0x7f0000000240)=""/2, 0x41100, 0x5, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xb, 0x3, 0xd6}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)=[r6, r7, 0x1, r8, r9, r10, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) 00:01:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xffc}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f00000001c0)={0x0, 0x0, 0xfff, 0x7fffffffffffffff, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r2}) 00:01:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x8, 0x401, 0x0, 0x1, 0x800, 0xffffffffffffffff, 0xed1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0xfe, 0x5, 0x4000002, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, @local, 0x10, 0x7, 0x1, 0x3ff}}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r8 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r9, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r10 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r10, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@alu={0x7, 0x0, 0x7, 0x5, 0xb, 0x40, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x12}, @generic={0x20, 0x4, 0xe, 0x3ff, 0x8}, @func, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}, @map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfff}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0x2, &(0x7f0000000240)=""/2, 0x41100, 0x5, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xb, 0x3, 0xd6}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)=[r6, r7, 0x1, r8, r9, r10, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x8, 0x401, 0x0, 0x1, 0x800, 0xffffffffffffffff, 0xed1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0xfe, 0x5, 0x4000002, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, @local, 0x10, 0x7, 0x1, 0x3ff}}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r9, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r10, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@alu={0x7, 0x0, 0x7, 0x5, 0xb, 0x40, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x12}, @generic={0x20, 0x4, 0xe, 0x3ff, 0x8}, @func, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}, @map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfff}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0x2, &(0x7f0000000240)=""/2, 0x41100, 0x5, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xb, 0x3, 0xd6}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)=[r6, r7, 0x1, r8, r9, r10, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0189436, &(0x7f00000001c0)={r2}) 00:01:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x240200) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x8663, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000200)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000100)={r8}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x240200) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x8663, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000200)={r8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000100)={r8}) (async) 00:01:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x480041, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x7d, 0x1003, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000180)={r3}) 00:01:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) 00:01:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xffc}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f00000001c0)={0x0, 0x0, 0xfff, 0x7fffffffffffffff, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r2}) 00:01:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc020660b, &(0x7f00000001c0)={r2}) 00:01:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x8, 0x401, 0x0, 0x1, 0x800, 0xffffffffffffffff, 0xed1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0xfe, 0x5, 0x4000002, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, @local, 0x10, 0x7, 0x1, 0x3ff}}) (async) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r8 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r9, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) r10 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r10, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@alu={0x7, 0x0, 0x7, 0x5, 0xb, 0x40, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x12}, @generic={0x20, 0x4, 0xe, 0x3ff, 0x8}, @func, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}, @map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfff}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0x2, &(0x7f0000000240)=""/2, 0x41100, 0x5, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xb, 0x3, 0xd6}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)=[r6, r7, 0x1, r8, r9, r10, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) 00:01:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x480041, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x7d, 0x1003, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000180)={r3}) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x480041, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x7d, 0x1003}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r4}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000180)={r3}) (async) 00:01:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000240)={0x6bf}, 0x8) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r1}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x8, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000200)={r3}) 00:01:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x4, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffff9c, 0xc080661a, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=0x5, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x480041, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x7d, 0x1003, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000180)={r3}) 00:01:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x2, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x20000, 0x114) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000180)) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r6 = openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4d8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xa8}}}, 0x30) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f0000000080)={0x20, 0x6, 0x3, 0x3, 0x5, 0x8}) 00:01:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3, 0x1002}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r1}) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000200)=0x8, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:01:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000240)={0x6bf}, 0x8) (async) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r2}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r1}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x8, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000200)={r3}) 00:01:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x4, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffff9c, 0xc080661a, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=0x5, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000100), 0x4, 0x1) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffff9c, 0xc080661a, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=0x5, 0x4) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000080)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3}) 00:01:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3, 0x1002}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r1}) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000200)=0x8, 0x1) (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:01:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000240)={0x6bf}, 0x8) (async) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r1}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x8, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000200)={r3}) 00:01:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x2, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x20000, 0x114) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000180)) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r6 = openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4d8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xa8}}}, 0x30) (async, rerun: 64) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f0000000080)={0x20, 0x6, 0x3, 0x3, 0x5, 0x8}) (rerun: 64) 00:01:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0x800) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x4, 0x1) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffff9c, 0xc080661a, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=0x5, 0x4) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3, 0x1002}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r1}) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000200)=0x8, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3, 0x1002}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r1}) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) (async) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000200)=0x8, 0x1) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) (async) 00:01:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000080)) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3}) 00:01:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000080)={0x101, 0xdacb, 0x378, 0xfbfbfbfb}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000180)={0xfff, 0x6, 0x7, 0x4, 0x2, 0x8}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0x3c68fffb, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000200)={0x2, r2}) 00:01:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x2, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x20000, 0x114) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000180)) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r6 = openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4d8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xa8}}}, 0x30) (async) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f0000000080)={0x20, 0x6, 0x3, 0x3, 0x5, 0x8}) 00:01:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x20000000000001ba, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r4 = openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x32) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="0064657669636573202d637075736574202b64657669636573202b696f202b726c69df1fb0c3cecb6d6974202b6e6574"], 0x30) epoll_wait(r4, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_MASTER(r7, 0x641e) 00:01:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0x800) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000080)={0x101, 0xdacb, 0x378, 0xfbfbfbfb}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) (async, rerun: 64) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) (async, rerun: 64) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000180)={0xfff, 0x6, 0x7, 0x4, 0x2, 0x8}) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0x3c68fffb, 0x0, 0x10000}) (rerun: 32) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000200)={0x2, r2}) 00:01:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000080)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3}) 00:01:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x44e0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x20000000000001ba, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r4 = openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x32) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="0064657669636573202d637075736574202b64657669636573202b696f202b726c69df1fb0c3cecb6d6974202b6e6574"], 0x30) epoll_wait(r4, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000280)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_MASTER(r7, 0x641e) 00:01:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x2000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000100)={0x7fff, 0x0, 0x5, 0xfffffeff, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x8, 0xa4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000080)={0x9, 0x400, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{}, {}, {}, {}]}) 00:01:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{}, {}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0xffff, 0x7ff, 0x0, 0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3}) 00:01:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x44e0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x44e0, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000080)={0x101, 0xdacb, 0x378, 0xfbfbfbfb}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000180)={0xfff, 0x6, 0x7, 0x4, 0x2, 0x8}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0x3c68fffb, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000200)={0x2, r2}) 00:01:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x2000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000100)={0x7fff, 0x0, 0x5, 0xfffffeff, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x8, 0xa4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000080)={0x9, 0x400, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x2000) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000100)={0x7fff, 0x0, 0x5, 0xfffffeff, 0x4}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000140), 0x8, 0xa4000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000080)={0x9, 0x400, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) 00:01:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x20000000000001ba, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (rerun: 64) r4 = openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x32) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="0064657669636573202d637075736574202b64657669636573202b696f202b726c69df1fb0c3cecb6d6974202b6e6574"], 0x30) (async, rerun: 64) epoll_wait(r4, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) (async, rerun: 64) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000280)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r6}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_MASTER(r7, 0x641e) 00:01:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{}, {}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0xffff, 0x7ff, 0x0, 0x0}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3}) 00:01:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{}, {}, {}, {}]}) 00:01:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r2 = openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x426, 0x400002, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8, 0x3, 0x5, 0x80000000], 0x4, 0x800, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0x20000002}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r3}) 00:01:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x44e0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x44e0, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x2000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000100)={0x7fff, 0x0, 0x5, 0xfffffeff, 0x4}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x8, 0xa4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000080)={0x9, 0x400, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{}, {}, {}, {}]}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r6, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{}, {}, {}, {}]}) (async) 00:01:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r2 = openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x426, 0x400002, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8, 0x3, 0x5, 0x80000000], 0x4, 0x800, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0x20000002}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x426, 0x400002, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8, 0x3, 0x5, 0x80000000], 0x4, 0x800}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0x20000002}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r3}) (async) 00:01:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{}, {}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0xffff, 0x7ff, 0x0, 0x0}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x2) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3}) 00:01:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000000c0), 0x4) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x26, 0x80, 0x1001}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000140)={r4}) 00:01:13 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r0, 0x3, "d804fb", "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"}}, 0x110) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) connect$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x800, @none, 0xffff, 0x2}, 0xe) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:01:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f00000000c0)={0xbef, 0xffff, 0x9, 0xfbfbfbfb}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000000c0), 0x4) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x26, 0x80, 0x1001}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000140)={r4}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000000c0), 0x4) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x26, 0x80, 0x1001}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000140)={r4}) (async) 00:01:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:14 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r0, 0x3, "d804fb", "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"}}, 0x110) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) connect$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x800, @none, 0xffff, 0x2}, 0xe) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:01:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (rerun: 64) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f00000000c0)={0xbef, 0xffff, 0x9, 0xfbfbfbfb}) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r2 = openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x426, 0x400002, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8, 0x3, 0x5, 0x80000000], 0x4, 0x800, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0x20000002}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x426, 0x400002, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8, 0x3, 0x5, 0x80000000], 0x4, 0x800}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0x20000002}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r3}) (async) 00:01:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x80040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r4 = openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001200)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ff000000000000000000000000000080050000000000000007000000000000000100010000000000060000000000200003000000040000001700000000800000080000000000000008000000000000000900000000000000000000000000008040000000000000000000000000000000000000002000"/168]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000200)={0x0, r6, "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", "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"}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 00:01:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:14 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r0, 0x3, "d804fb", "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"}}, 0x110) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) connect$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x800, @none, 0xffff, 0x2}, 0xe) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:01:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000000c0), 0x4) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x26, 0x80, 0x1001}) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000140)={r4}) 00:01:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x401, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f00000000c0)={0xbef, 0xffff, 0x9, 0xfbfbfbfb}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x80040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r4 = openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001200)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ff000000000000000000000000000080050000000000000007000000000000000100010000000000060000000000200003000000040000001700000000800000080000000000000008000000000000000900000000000000000000000000008040000000000000000000000000000000000000002000"/168]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000200)={0x0, r6, "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", "5ed449c5baa731c3044ccc4e97e6a120a5aa225185deb63c1da59b8598ddaffbc3a4470370c092fb34a913c2698ecd909ca2c2a49d5cd29cc2005e7c3cb8a643ea7ce9c215116d4572710786ac11420ac6e4563adb132ac6ea3fe1289bb804d01f2f6660758dbadd62e44883b1e9401a63c4f8dcf9c8d0d900de0e588c771fcafa7e369db538c40b6a1dcd1a3d8e9ca0ff120432cc0ed315d2a7dbeb38dec3e7528cc44aa0fe076da35f56b8505bb031d5049dbc4c87cdade2b40e5fc3f3c2fb6e5d8af0b2cc196aae40308c2d4b7c854e050e1e980c5f65177ed68f294c30129fc174ad8ccb6481e8444e3a43b7ed60917edd324189c2be5c81c6577f1cb35081b1dd32f157c822c4ca7e8ae8c07e1f7dffddc42978f79c72978422bbbc4ff4b821e745b496982c3fe3571be5e39dab2871ce3d74bf16aaa44a1b54838e8faf13e7a2e9df01d3f99dc3c100d5c0654826eb094fc4b16aad3f9523c3aeb2ad8890b9ab763514e96b256157bb33a4782dd679eb51fcc1bca77bb3ee018087cff4408ac9fd3ce30b4c3bcbcf6db92d16a4ef729e09133b605e5877158eeafae6ef0735ed3c0eefd37de000d859fe67cff9c8621653e28bb289342b9724e9fc8f93f459738617911d2d3e454eb230ac8e9e60a16895a7fff3fc1fffeab699a223c4792ef2167a9bd14eff550a570d1e4d4a1fdd0cb39b2512519d89cba864e5a7323d1c25287ae3bd7c7331aaf9fa9faff9b7df05663f97c287f3b10c1debd5c32ac8416c9e0eb20e42289cd22efebe138c1efd430d8d822baa5d4ba13bcd31894bfbcad72488fad0c5af3ed2cee0c3eb9b5b51e1fd5e92fdfd4b8c53e04df950c41d6fb0c3f6f5756efa0ce3bbaa4fd25333b30a3055ec510710c0e7ef99e2a03bd21e7c5b118ebcf0518e7657904e176b97022f665a0f80cd4d9a480c2660710020d835b41a8181d3cf60fec2a02c05acd45d70c94f38b6bebdc12974120238ee282fc28ce09c69156e7daf490e2a16f358ed356c4ee76a1e0c4c9edb295076881c973e1ecd6b0b5e1aec192744354323d67e61bf244eb1a3f5da414235d0059fd7e327acb2a392b5b1f4411c0314177c37dad972af4890a03181906eedbc9b1e5642d0b732580170c8243e3968675a122fd75f05ab6d1826c0fe2bfc7b2fd0b34e93aacfd8f20414efab85e5f2bb921ac9d9fd19ad4bb82c46769651eb94136d4d3984d35426b5c1c7c9163ba1cb19cec4fb33da3ced92e7057e2e9e78fa438b741bf8bec6ed1991ea68dcccd2378ec9ada05bf11b2838613a6ce3f9e61ffe2b5239ec0f682e081e900e9b1ecd8ca997ec2927f966842fc068f324ac744eb595667fd4a6de39a4db1f147d5d198a300e681380bf4d9c43e4c95c7f30d1dd1e577e21eb71505933a6e9dbba58093ff465fabba0525a2dca64d5307a03222a254a59c4ba6faef7cc91a4ce3440aa05cace02ed360a37652cc7e149182b1893a80bd6aa61f003cc75cfe68033c11a7b5afbc0bed877b725552070b2dad7dc8c2cd44022edd9a17cbc177ccb55381ac879f0905a4746f5eb44a29dbb54e9ca9aeed036ef0178fc6bc72c5df17090f19b8ecb4c539fc36a17aea872d3e6021064f6e10f319a418d4a2fba83d8ad2d5d8b866288b8288641f29776dc8ca3aafe5c828a9485c4e4ececede89f0d3bc4bdd1bb5a7c34364aa1652b53aae4efe8171d51c7069ded1eefdbf32acd4caecefb47a1e84971af29932f40b59b0603173fbac6022ce56f924d0a8d95733fb40f7fe848b559ad884681d127804131e8e1b97b40143e2f70bbd4db0199c4d3f21b3027d7faa8ca8e0aa864b58953ce424743e2f4f2fdc57917a7a07a9a45909226552f8700f90b16b0d76eea811c845b5d1191037792fedda5e3c2836f0c89d91e0d1faf0352a1e111285220b1f2be0e8b09206850d3b806f9e987a0f596dfd757fee11725aa0f62b1c08d0bf9adee5f5e4d8cb9e40e1c0bd11b6c8876ccb10d4f6a6b7726b96e3745afa571f0b9afd4285c2d3ed4f633880179460687226271966590764c64919e722fa519345f365e2659d13f089300088b715626f31dc11f90b330ec15c23977290b81c2f8a8fcea26c83fd2160341307616acc12a1d78d3d64ece8374a388d68bba866bc70156399a2e7d149bef46bdf0748aefb88fdc4fb56e63122c3e6529d63f039c698ce87f6769e5bd3d7a7d706c434c40d49dd12b5cd173f15c067e84c7b3eb8543f6c4c0630374860522e57d67090b14d45dd7dd659c06f7fe33335137d3ad2658a0878dfc49336a08c70d119009f4e4c58027feb890d3ee6a3e0ac23e5e164f813faf0af0eba6ededcf0c00667d365df179e1b079d9a88779a3e693c2f7718cf829a789e9db963fb748a648d8c16bbdedbb0fe8eef0d51ecf2e3d797decbde8a342764c3c315460ac3b650a9bddf7d17726d0c74fc1e79c8b5b33c372a21fff99c703c330f5aa12fc475c7b04743b3b46d0562947b24ea15bcf2bc87169ae239eb7c122d132d05817f9676cc277a86f0bd43c1bf66ce9d790cf25905e55a0dd999c7fc467d3bf2a19c92c8418b1332d69b53bb77aaf0bce06af29a7049c8301dcdaa1e86b1698761d417610d2d14080f983abd33f4c4c29dfb3aa2bfe38318c550546b897e0dc1a352ea3ee2512d446eb2c93a2bd23212d12d25618b9f5be7e3893c26e419b84c6ec2fb72169dfd9b09512d2d6602072a6e7f8e6bcd7d468b77976d53ec20add1f1a78808c76857ae1998102c697088a9a925929b8712be21dafabc99af10e5926f187353763048cb37f831ace4b1e48790bbc9d17ca28e9f07e66852e14db7bccaaa86604dfde2b96cc4ad4522e9b6cd0cb6a7ea12baae62bf4f5a47e8575f123978e572c41b76f35460029588861a81cbda997d99b6891ddce41336274c7abf26b91d8b002b57c93fb5bbb0f7898bfd5ed5340559099742bd665a0627fba8122d148dfa0beb15dae1f54ae78363a990c19a61701cb583c088150bc4502bd60e71826709ba08827e91b3255fb27faf209599b57792e29ae3ed3d3abfa0ca3e15fa79043c25c0635931c09bf1e40b58de0cc6ab47ed554651da759d335dad4a678c9cc754dc6e3e93c1550543adac802db534ec9b86023acd381210fff10ca729361a06ab9c26510a79dd7aa822ac5fdc364fc49749679540ef22f8d0ab9f10c364917bc04940085db6a5f16ff08bd63f46f913b29fc506b23bf73d4be2dc5da241872b356639667d4e703de936f5b93c052d508d419ffa01378bc4d6589dcc1555822b332b7923908039e0882245c64374e9e554a5322b5155bfe1fec0522abbc1d49cf45cacbd4bafc2c8fe815ce5bdcf1fd1150096cd5fb66e1767faa0792b1058112da7974c848ddbd6bb3b2ec94f1b73eb6cff04066c1859af6bdcfe7250cd2851f702a615718f40e8b26a91772e80ed137485fe008116ebdf12b34d82bab22427b865016d45ea0522d138226fe862c73f87486f76f3f425b09eb1ab7e3370af63cefca346a97ff14c4cc2331f88566b7b824ae80e4483b6045ec1eaf8be9f31b1eb353702ae921c505ed2a2c98f32f30d394d8fdb8ff523f9dd90ae5dd7e6df01db2ae763105a5c23a6bc7b85f6c7e422b248246b41780b19dcfa2c8818548880d6cd9a6b21f96928a9884d256cd12f6397e5ba182b86e89cd1d5e9f280fdfb5a335297fb8816030514d8772f277269bebfaefb0f7c9b0a1ab155e06f2f36b482a520879a21bfc8f3affe153244f5b9c5bad420a52968a1020df7a5edf00828fefb9846cd4611c41aa6f558ebc126013dbaf099e8d2e7d95710ae02b3a4431ed72f5f9bd8e28661c352865cee445513a4447df8d1e56ae5c982fd0e30d16ac9c0e98fcade18a71985630e60dc13cd3616f6b1879733d6baa0fd0700490a015aa7a142ae4140051fb7e85a1ab8f5854a89af308b88ed143f4fadfc1d1a561c0a47d9a77c23acd4fa67a78a20cc130cd37a87dd65a49b326b4c14a35394bc10ce9fbed8a92ee52ee2a33c8959f8ce68292fca4e52db4a54e249c448990099fe4cfface7fe17ced188588d5dac29497a01bde9f8694a278f535ee7f1262960be9daf24f915784decd8e341a70f2c744c9731c4352a98c1ad749f5c4dba2a97c720fcf123f7c1356359293453bdf962d9ed8d943db3a822f603b2eaf92004ad95c2f58a57bde598a5a0d7d86d93c082b41423e7c62ceb8f509dd9be02ff880eac66315bdbba7d5fc1419104b1c65d4c455636bffd8626e6725685525170b1a93c1f2d19acc6f91674cf6d1b9e8e2ed9e724df2d9f533f682bd4327b35ecd56b29acf2eea0add172e2470077d05bf57d1d5b9190491e7027d29589195308544cb26092673b241f248c7ea81e47b2ebfb278c50daa6e6eda29b23416527721897f01a04550151017d56a5411c771228438cfb864d3cc37e0ce2cb55e92bab7410288becd8d16b899483a2fa0b53771cf154d15fe7495456e048f6b5ed6e3f2780fccd7dff6ea04c823ac62e179963170bb72ac8d2ab4c23481df03b0f2e464ee75e2420d02c294bbe360b188b621857871754729485673a8092b0622dc8ccb3074746c9546f504e9b58444dc7d345348db87211057c80e3e5f0d34f98aa9fb655753441cf06cadc38ba9cfd8abb4d41d7aa69ca2db385a9d0ffdbd01b2e522271e8ce442eb96845b5c9ef36b8c824312a7ecdf160e782933c58bbca0d76012d6036de35115b1737174157f8978a2f1c1172c95753fec267e5df3d7bbf2e90bced55cf3da388f826e2c2531b9b8fe0779dd279c944d09a3e15aca6533d399168345dd4d52dc9507053075a72e009f7be70e39303ca4e85f6bc0fdfc79d6ef8332dcfe4903880683975d2fc333f3766fd8faa1c97bc5249faa174749a76b09a0d1548a6d7b0c0c30af4c0667d88ab579fb8f90c1e19397650cb1184f319b18b890614b6796bb9fdb517597602192ce5410fae791b0e7ef821fc1ff7908b720ddd0bbea563450d4db6474f2a179356a3f28042f2d87f72aeedd24c6d77f6aacffae79a9ff421eba91e4f81c7a43dbeeed4e6960ca61a5ba4f7964393ad39b85032dd90a019cd2b64d2547df9b07bc3d34d72c67d9e32a7720da97dc6ba5a083bd858309fe2f42af7d8ecb53c590a4d5d6aa41224ecdcf6b85052c704ce5188554b914ad56879e2b20d205cbd1e23893f0e759fef651e4c398842e88063c5f85e3460d185fa4efe5daa833aa7fe0f504af35aba20cf472f7e1ad4a914516ab1500efda9ae71991d53b74156c5911188e8ed8a10def404844edffdc0265fa9342f67b844d5e4ef74b30ad47e0b805690de8cdde774adc2c010ee0e1e0f53604854764ddd1c7879aecb8a5cc24e1f29fe990984368"}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x80040) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001200)) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ff000000000000000000000000000080050000000000000007000000000000000100010000000000060000000000200003000000040000001700000000800000080000000000000008000000000000000900000000000000000000000000008040000000000000000000000000000000000000002000"/168]) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000200)={0x0, r6, "27059c4685f3c620fb38d5415e7617da0a09bf29055abcea9c4b2fed9e5009b8fdd6e5b32626040460ea437c62caf15f61a19f8424781fd2768627994d0cf7c1d0bd58536636db37db22c5aaca2e317e132ff135e010898e97ebb481c78838cd30ab34e3c2836fe95a44956091639aa4d1e89adb64320b0ab64d26e3b450a9850c75d848f4dfed075c02c5ee993e8c807df400190c3d4a3fed9846ec1ba0865a29a1f045dc8ba74a48a233bab5d52833a3209245675d53880ca56abed0ec419f60ec03aca9c36dc14a89964a8b2a3baadc03573c2a44222548ce9412300bbee3b24ba5ad4fa265554a8511ae059a87b38c3f5c0bac3dfa5a74b2fb2951ee901f", "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"}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) (async) 00:01:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x400080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) r3 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x2000, 0x88) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.pending_reads\x00', 0x1a1801, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000200)={0x0, 0x1, r4}) 00:01:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xc8800) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0x1003, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x80040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r4 = openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001200)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ff000000000000000000000000000080050000000000000007000000000000000100010000000000060000000000200003000000040000001700000000800000080000000000000008000000000000000900000000000000000000000000008040000000000000000000000000000000000000002000"/168]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000200)={0x0, r6, "27059c4685f3c620fb38d5415e7617da0a09bf29055abcea9c4b2fed9e5009b8fdd6e5b32626040460ea437c62caf15f61a19f8424781fd2768627994d0cf7c1d0bd58536636db37db22c5aaca2e317e132ff135e010898e97ebb481c78838cd30ab34e3c2836fe95a44956091639aa4d1e89adb64320b0ab64d26e3b450a9850c75d848f4dfed075c02c5ee993e8c807df400190c3d4a3fed9846ec1ba0865a29a1f045dc8ba74a48a233bab5d52833a3209245675d53880ca56abed0ec419f60ec03aca9c36dc14a89964a8b2a3baadc03573c2a44222548ce9412300bbee3b24ba5ad4fa265554a8511ae059a87b38c3f5c0bac3dfa5a74b2fb2951ee901f", "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"}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 00:01:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x401, 0x2, 0x5, 0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x40200) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x6, 0x0, 0xff, 0x2d], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x200, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:01:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0x1003, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xc8800) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xc8800) (async) syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x800) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) 00:01:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x400080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) (async) r3 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x2000, 0x88) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.pending_reads\x00', 0x1a1801, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000200)={0x0, 0x1, r4}) 00:01:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f00000000c0)) 00:01:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0x1003, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0x1003}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x40200) (rerun: 32) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x6, 0x0, 0xff, 0x2d], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x200, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) 00:01:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x401, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x401, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) (async) 00:01:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xc8800) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x800) (rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x400080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) (async) r3 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x2000, 0x88) (async) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.pending_reads\x00', 0x1a1801, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000200)={0x0, 0x1, r4}) 00:01:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000480)={r2, 0x101, 0x9, 0x1, 0x8, 0xd2, 0x0, 0x4e9, 0x0, 0x3, 0x607802e7, 0x76c}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000080)={0x7e3e, 0x33, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x9, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r5}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000180)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000340)={{}, [@netrom, @bcast, @default, @netrom, @remote, @rose, @rose]}, &(0x7f00000003c0)=0x48, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r7, 0xc00464c9, &(0x7f0000000300)={r8}) 00:01:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f00000000c0)) (async) 00:01:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x40200) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x6, 0x0, 0xff, 0x2d], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x200, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x40200) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x6, 0x0, 0xff, 0x2d], 0x4, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x200, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r5}) (async) 00:01:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000480)={r2, 0x101, 0x9, 0x1, 0x8, 0xd2, 0x0, 0x4e9, 0x0, 0x3, 0x607802e7, 0x76c}) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000080)={0x7e3e, 0x33, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x9, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r5}) (async) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000340)={{}, [@netrom, @bcast, @default, @netrom, @remote, @rose, @rose]}, &(0x7f00000003c0)=0x48, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r7, 0xc00464c9, &(0x7f0000000300)={r8}) 00:01:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x1, 0x1, 0x7f, 0x100, 0x3ff, 0x101, 0x3cd, 0x4, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x402200) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x103, 0x0, 0x8000f05, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r1}) 00:01:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f00000000c0)) (async) 00:01:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x1, 0x1, 0x7f, 0x100, 0x3ff, 0x101, 0x3cd, 0x4, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x1, 0x1, 0x7f, 0x100, 0x3ff, 0x101, 0x3cd, 0x4, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) (async) 00:01:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000480)={r2, 0x101, 0x9, 0x1, 0x8, 0xd2, 0x0, 0x4e9, 0x0, 0x3, 0x607802e7, 0x76c}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000080)={0x7e3e, 0x33, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x9, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r5}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000180)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000340)={{}, [@netrom, @bcast, @default, @netrom, @remote, @rose, @rose]}, &(0x7f00000003c0)=0x48, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r7, 0xc00464c9, &(0x7f0000000300)={r8}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000480)={r2, 0x101, 0x9, 0x1, 0x8, 0xd2, 0x0, 0x4e9, 0x0, 0x3, 0x607802e7, 0x76c}) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000080)={0x7e3e, 0x33, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x9, 0x1}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r5}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000240)) (async) accept4$ax25(0xffffffffffffffff, &(0x7f0000000340)={{}, [@netrom, @bcast, @default, @netrom, @remote, @rose, @rose]}, &(0x7f00000003c0)=0x48, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r7, 0xc00464c9, &(0x7f0000000300)={r8}) (async) 00:01:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x74, 0x381802) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x107000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000000340)='.pending_reads\x00', 0x48143, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000300)={r5}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x201) openat$incfs(r6, &(0x7f0000001900)='.log\x00', 0x282082, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000080)={0x7, "dcb0c8"}, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x6, [@typedef={0xb}, @struct={0x8, 0x6, 0x0, 0x4, 0x1, 0x1, [{0xb, 0x1, 0x7}, {0x9, 0x5, 0x1}, {0x0, 0x0, 0x4}, {0x8, 0x4, 0x3ff}, {0xe, 0x0, 0x2}, {0xb, 0x2, 0x4}]}, @restrict={0x9, 0x0, 0x0, 0xb, 0x4}, @var={0xa, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x2e, 0x30, 0x61, 0x30]}}, &(0x7f0000000200)=""/198, 0x9a, 0xc6}, 0x20) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 00:01:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x103, 0x0, 0x8000f05, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x20000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x103, 0x0, 0x8000f05}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r1}) (async) 00:01:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x402200) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x402200) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x1, 0x1, 0x7f, 0x100, 0x3ff, 0x101, 0x3cd, 0x4, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 00:01:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x74, 0x381802) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x107000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000000340)='.pending_reads\x00', 0x48143, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000300)={r5}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x201) openat$incfs(r6, &(0x7f0000001900)='.log\x00', 0x282082, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000080)={0x7, "dcb0c8"}, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x6, [@typedef={0xb}, @struct={0x8, 0x6, 0x0, 0x4, 0x1, 0x1, [{0xb, 0x1, 0x7}, {0x9, 0x5, 0x1}, {0x0, 0x0, 0x4}, {0x8, 0x4, 0x3ff}, {0xe, 0x0, 0x2}, {0xb, 0x2, 0x4}]}, @restrict={0x9, 0x0, 0x0, 0xb, 0x4}, @var={0xa, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x2e, 0x30, 0x61, 0x30]}}, &(0x7f0000000200)=""/198, 0x9a, 0xc6}, 0x20) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) syz_open_dev$dri(&(0x7f0000000100), 0x74, 0x381802) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x107000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r3, &(0x7f0000000340)='.pending_reads\x00', 0x48143, 0x1) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000300)={r5}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x201) (async) openat$incfs(r6, &(0x7f0000001900)='.log\x00', 0x282082, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000080)={0x7, "dcb0c8"}, 0x6) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x6, [@typedef={0xb}, @struct={0x8, 0x6, 0x0, 0x4, 0x1, 0x1, [{0xb, 0x1, 0x7}, {0x9, 0x5, 0x1}, {0x0, 0x0, 0x4}, {0x8, 0x4, 0x3ff}, {0xe, 0x0, 0x2}, {0xb, 0x2, 0x4}]}, @restrict={0x9, 0x0, 0x0, 0xb, 0x4}, @var={0xa, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x2e, 0x30, 0x61, 0x30]}}, &(0x7f0000000200)=""/198, 0x9a, 0xc6}, 0x20) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) (async) 00:01:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x402200) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x402200) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x103, 0x0, 0x8000f05, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r1}) 00:01:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x4, 0x20, 0x94}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000200)) r4 = openat$incfs(r3, &(0x7f0000000180)='.log\x00', 0x41, 0x10) fanotify_mark(r2, 0x200, 0x80000010, r4, &(0x7f00000001c0)='./file0\x00') ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r5}) 00:01:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000100)={r4, r5, 0xabe, 0x3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x74, 0x381802) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x107000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000000340)='.pending_reads\x00', 0x48143, 0x1) (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000300)={r5}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x201) openat$incfs(r6, &(0x7f0000001900)='.log\x00', 0x282082, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000080)={0x7, "dcb0c8"}, 0x6) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x6, [@typedef={0xb}, @struct={0x8, 0x6, 0x0, 0x4, 0x1, 0x1, [{0xb, 0x1, 0x7}, {0x9, 0x5, 0x1}, {0x0, 0x0, 0x4}, {0x8, 0x4, 0x3ff}, {0xe, 0x0, 0x2}, {0xb, 0x2, 0x4}]}, @restrict={0x9, 0x0, 0x0, 0xb, 0x4}, @var={0xa, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x2e, 0x30, 0x61, 0x30]}}, &(0x7f0000000200)=""/198, 0x9a, 0xc6}, 0x20) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 00:01:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x7f, 0x420501) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x4, 0x20, 0x94}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000200)) r4 = openat$incfs(r3, &(0x7f0000000180)='.log\x00', 0x41, 0x10) fanotify_mark(r2, 0x200, 0x80000010, r4, &(0x7f00000001c0)='./file0\x00') ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r5}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x4, 0x20, 0x94}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000200)) (async) openat$incfs(r3, &(0x7f0000000180)='.log\x00', 0x41, 0x10) (async) fanotify_mark(r2, 0x200, 0x80000010, r4, &(0x7f00000001c0)='./file0\x00') (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r5}) (async) 00:01:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000080)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000100)={r4, r5, 0xabe, 0x3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x80000, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x3ff, 0x3ff, 0x3], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x401, 0x81, 0xfff, 0x0, 0x0}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x7f, 0x420501) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd, 0x2100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r4 = openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r6, 0x2}}, 0x18) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) 00:01:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x4, 0x20, 0x94}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000200)) (async) r4 = openat$incfs(r3, &(0x7f0000000180)='.log\x00', 0x41, 0x10) fanotify_mark(r2, 0x200, 0x80000010, r4, &(0x7f00000001c0)='./file0\x00') ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r5}) 00:01:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x400000) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x3ff, 0x3ff, 0x3], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x401, 0x81, 0xfff, 0x0, 0x0}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000100)={r4, r5, 0xabe, 0x3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000100)={r4, r5, 0xabe, 0x3}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) 00:01:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd, 0x2100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r4 = openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r6, 0x2}}, 0x18) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) 00:01:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x80000, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x7f, 0x420501) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x81, 0xffd, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)={r2}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f00000001c0)={0x3, 0x3, 0x91b, 0x4, 0x0, 0x47, 0x2, 0xa253, 0x7}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r2}) 00:01:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x400000) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x3ff, 0x3ff, 0x3], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x401, 0x81, 0xfff, 0x0, 0x0}) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r2}) 00:01:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x80000, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd, 0x2100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r4 = openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r6, 0x2}}, 0x18) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xd, 0x2100) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r5, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r6, 0x2}}, 0x18) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) (async) 00:01:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) 00:01:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x3, 0xfffffffb, 0x80, 0x85c3, 0x8, 0xffff2748, 0x2, 0x7fff, 0x80}) 00:01:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x81, 0xffd, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)={r2}) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f00000001c0)={0x3, 0x3, 0x91b, 0x4, 0x0, 0x47, 0x2, 0xa253, 0x7}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r2}) 00:01:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff, 0x0, 0x0}) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000240)={r1}) r5 = openat$incfs(r2, &(0x7f0000000200)='.pending_reads\x00', 0x2a0540, 0x11) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f00000000c0)={r6}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x310) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000180)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r9}) 00:01:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x4, 0x1f, 0x1f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x1f, 0x1412, 0x65, 0x35, 0x21, 0x4, 0x1], 0x7, 0x80000}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r1, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (rerun: 64) 00:01:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x88002) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 00:01:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x3, 0xfffffffb, 0x80, 0x85c3, 0x8, 0xffff2748, 0x2, 0x7fff, 0x80}) 00:01:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x81, 0xffd, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)={r2}) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r3, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f00000001c0)={0x3, 0x3, 0x91b, 0x4, 0x0, 0x47, 0x2, 0xa253, 0x7}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r2}) 00:01:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff, 0x0, 0x0}) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000240)={r1}) r5 = openat$incfs(r2, &(0x7f0000000200)='.pending_reads\x00', 0x2a0540, 0x11) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f00000000c0)={r6}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x310) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000180)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r9}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000240)={r1}) (async) openat$incfs(r2, &(0x7f0000000200)='.pending_reads\x00', 0x2a0540, 0x11) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f00000000c0)={r6}) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x310) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000180)={r6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r9}) (async) 00:01:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x4, 0x1f, 0x1f, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x1f, 0x1412, 0x65, 0x35, 0x21, 0x4, 0x1], 0x7, 0x80000}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r1}) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) 00:01:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x88002) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x88002) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) (async) [ 3181.789636] ================================================================== [ 3181.797652] BUG: KASAN: use-after-free in vgem_gem_dumb_create+0x22c/0x240 [ 3181.804668] Read of size 8 at addr ffff8880a444c140 by task syz-executor.4/22922 [ 3181.812200] [ 3181.813831] CPU: 0 PID: 22922 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 3181.821750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3181.831104] Call Trace: [ 3181.833712] dump_stack+0x1fc/0x2ef [ 3181.837354] print_address_description.cold+0x54/0x219 [ 3181.842648] kasan_report_error.cold+0x8a/0x1b9 [ 3181.847324] ? vgem_gem_dumb_create+0x22c/0x240 [ 3181.852008] __asan_report_load8_noabort+0x88/0x90 [ 3181.856955] ? drm_gem_object_put_unlocked+0xa0/0x180 [ 3181.862154] ? vgem_gem_dumb_create+0x22c/0x240 [ 3181.866832] vgem_gem_dumb_create+0x22c/0x240 [ 3181.871429] drm_mode_create_dumb+0x27c/0x300 [ 3181.875929] drm_ioctl_kernel+0x208/0x2a0 [ 3181.880082] ? drm_mode_create_dumb+0x300/0x300 [ 3181.884759] ? drm_ioctl_permit+0x210/0x210 [ 3181.889089] ? __might_fault+0x192/0x1d0 [ 3181.893161] drm_ioctl+0x5a0/0x9e0 [ 3181.896711] ? drm_mode_create_dumb+0x300/0x300 [ 3181.901385] ? drm_getstats+0x20/0x20 [ 3181.905199] ? __lock_acquire+0x6de/0x3ff0 [ 3181.909446] ? __lock_acquire+0x6de/0x3ff0 [ 3181.913688] ? drm_getstats+0x20/0x20 [ 3181.917518] do_vfs_ioctl+0xcdb/0x12e0 [ 3181.921408] ? lock_downgrade+0x720/0x720 [ 3181.925546] ? check_preemption_disabled+0x41/0x280 [ 3181.930547] ? ioctl_preallocate+0x200/0x200 [ 3181.934957] ? __fget+0x356/0x510 [ 3181.938404] ? do_dup2+0x450/0x450 [ 3181.941940] ? lock_acquire+0x170/0x3c0 [ 3181.945896] ? finish_task_switch+0x118/0x760 [ 3181.950376] ksys_ioctl+0x9b/0xc0 [ 3181.953835] __x64_sys_ioctl+0x6f/0xb0 [ 3181.957715] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3181.962287] do_syscall_64+0xf9/0x620 [ 3181.966076] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3181.971252] RIP: 0033:0x7fb35eaa45a9 [ 3181.974960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3181.993842] RSP: 002b:00007fb35d3d6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3182.001532] RAX: ffffffffffffffda RBX: 00007fb35ebc6120 RCX: 00007fb35eaa45a9 [ 3182.008796] RDX: 0000000020000000 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 3182.016046] RBP: 00007fb35eaff580 R08: 0000000000000000 R09: 0000000000000000 [ 3182.023294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3182.030548] R13: 00007ffecf60dfaf R14: 00007fb35d3d6300 R15: 0000000000022000 [ 3182.037800] [ 3182.039406] Allocated by task 22922: [ 3182.043105] kmem_cache_alloc_trace+0x12f/0x380 [ 3182.047756] __vgem_gem_create+0x44/0xf0 [ 3182.051806] vgem_gem_dumb_create+0xcf/0x240 [ 3182.056192] drm_mode_create_dumb+0x27c/0x300 [ 3182.060666] drm_ioctl_kernel+0x208/0x2a0 [ 3182.064795] drm_ioctl+0x5a0/0x9e0 [ 3182.068314] do_vfs_ioctl+0xcdb/0x12e0 [ 3182.072176] ksys_ioctl+0x9b/0xc0 [ 3182.075608] __x64_sys_ioctl+0x6f/0xb0 [ 3182.079479] do_syscall_64+0xf9/0x620 [ 3182.083270] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3182.088431] [ 3182.090041] Freed by task 22922: [ 3182.093398] kfree+0xcc/0x210 [ 3182.096483] drm_gem_object_free+0x91/0x1c0 [ 3182.100783] drm_gem_object_put_unlocked+0xd1/0x180 [ 3182.105783] vgem_gem_dumb_create+0x10c/0x240 [ 3182.110258] drm_mode_create_dumb+0x27c/0x300 [ 3182.114729] drm_ioctl_kernel+0x208/0x2a0 [ 3182.118859] drm_ioctl+0x5a0/0x9e0 [ 3182.122377] do_vfs_ioctl+0xcdb/0x12e0 [ 3182.126247] ksys_ioctl+0x9b/0xc0 [ 3182.129682] __x64_sys_ioctl+0x6f/0xb0 [ 3182.133550] do_syscall_64+0xf9/0x620 [ 3182.137331] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3182.142492] [ 3182.144100] The buggy address belongs to the object at ffff8880a444c040 [ 3182.144100] which belongs to the cache kmalloc-512 of size 512 [ 3182.156740] The buggy address is located 256 bytes inside of [ 3182.156740] 512-byte region [ffff8880a444c040, ffff8880a444c240) [ 3182.168591] The buggy address belongs to the page: [ 3182.173498] page:ffffea0002911300 count:1 mapcount:0 mapping:ffff88813bff0940 index:0x0 [ 3182.181617] flags: 0xfff00000000100(slab) [ 3182.185743] raw: 00fff00000000100 ffffea0002c2f748 ffffea0002a5e408 ffff88813bff0940 [ 3182.193614] raw: 0000000000000000 ffff8880a444c040 0000000100000006 0000000000000000 [ 3182.201470] page dumped because: kasan: bad access detected [ 3182.207153] [ 3182.208756] Memory state around the buggy address: [ 3182.213666] ffff8880a444c000: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 3182.221001] ffff8880a444c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3182.228335] >ffff8880a444c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3182.235669] ^ 00:01:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r3}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x3, 0xfffffffb, 0x80, 0x85c3, 0x8, 0xffff2748, 0x2, 0x7fff, 0x80}) (rerun: 64) 00:01:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x88002) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x88002) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) (async) 00:01:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x40, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.log\x00', 0x490000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x6, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000180)={0x0, r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000080)) 00:01:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x4, 0x1f, 0x1f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x1f, 0x1412, 0x65, 0x35, 0x21, 0x4, 0x1], 0x7, 0x80000}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400c, 0x8, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x4, 0x1f, 0x1f}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x1f, 0x1412, 0x65, 0x35, 0x21, 0x4, 0x1], 0x7, 0x80000}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r4}) (async) [ 3182.241105] ffff8880a444c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3182.248454] ffff8880a444c200: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 3182.255790] ================================================================== [ 3182.263126] Disabling lock debugging due to kernel taint 00:01:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff, 0x0, 0x0}) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) r3 = openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000240)={r1}) r5 = openat$incfs(r2, &(0x7f0000000200)='.pending_reads\x00', 0x2a0540, 0x11) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f00000000c0)={r6}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x310) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000180)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r9}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400c, 0x8, 0xfff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r2, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r4, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000240)={r1}) (async) openat$incfs(r2, &(0x7f0000000200)='.pending_reads\x00', 0x2a0540, 0x11) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f00000000c0)={r6}) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x310) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001780), 0x0) (async) openat$incfs(r7, &(0x7f0000001900)='.pending_reads\x00', 0x90000, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000180)={r6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x3, 0xfff}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xfff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r9}) (async) [ 3182.358276] Kernel panic - not syncing: panic_on_warn set ... [ 3182.358276] [ 3182.365678] CPU: 0 PID: 22922 Comm: syz-executor.4 Tainted: G B 4.19.211-syzkaller #0 [ 3182.374940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3182.384291] Call Trace: [ 3182.386884] dump_stack+0x1fc/0x2ef [ 3182.390514] panic+0x26a/0x50e [ 3182.393708] ? __warn_printk+0xf3/0xf3 [ 3182.397611] ? preempt_schedule_common+0x45/0xc0 [ 3182.402369] ? ___preempt_schedule+0x16/0x18 [ 3182.406867] ? trace_hardirqs_on+0x55/0x210 [ 3182.411193] kasan_end_report+0x43/0x49 [ 3182.415167] kasan_report_error.cold+0xa7/0x1b9 [ 3182.419834] ? vgem_gem_dumb_create+0x22c/0x240 [ 3182.424496] __asan_report_load8_noabort+0x88/0x90 [ 3182.429405] ? drm_gem_object_put_unlocked+0xa0/0x180 [ 3182.434663] ? vgem_gem_dumb_create+0x22c/0x240 [ 3182.439312] vgem_gem_dumb_create+0x22c/0x240 [ 3182.443795] drm_mode_create_dumb+0x27c/0x300 [ 3182.448278] drm_ioctl_kernel+0x208/0x2a0 [ 3182.452406] ? drm_mode_create_dumb+0x300/0x300 [ 3182.457052] ? drm_ioctl_permit+0x210/0x210 [ 3182.461350] ? __might_fault+0x192/0x1d0 [ 3182.465388] drm_ioctl+0x5a0/0x9e0 [ 3182.468921] ? drm_mode_create_dumb+0x300/0x300 [ 3182.473567] ? drm_getstats+0x20/0x20 [ 3182.477348] ? __lock_acquire+0x6de/0x3ff0 [ 3182.481562] ? __lock_acquire+0x6de/0x3ff0 [ 3182.485775] ? drm_getstats+0x20/0x20 [ 3182.489552] do_vfs_ioctl+0xcdb/0x12e0 [ 3182.493426] ? lock_downgrade+0x720/0x720 [ 3182.497555] ? check_preemption_disabled+0x41/0x280 [ 3182.502559] ? ioctl_preallocate+0x200/0x200 [ 3182.506945] ? __fget+0x356/0x510 [ 3182.510380] ? do_dup2+0x450/0x450 [ 3182.513899] ? lock_acquire+0x170/0x3c0 [ 3182.517852] ? finish_task_switch+0x118/0x760 [ 3182.522325] ksys_ioctl+0x9b/0xc0 [ 3182.525763] __x64_sys_ioctl+0x6f/0xb0 [ 3182.529639] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3182.534213] do_syscall_64+0xf9/0x620 [ 3182.538001] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3182.543180] RIP: 0033:0x7fb35eaa45a9 [ 3182.546870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3182.565750] RSP: 002b:00007fb35d3d6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3182.573437] RAX: ffffffffffffffda RBX: 00007fb35ebc6120 RCX: 00007fb35eaa45a9 [ 3182.580720] RDX: 0000000020000000 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 3182.587970] RBP: 00007fb35eaff580 R08: 0000000000000000 R09: 0000000000000000 [ 3182.595222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3182.602474] R13: 00007ffecf60dfaf R14: 00007fb35d3d6300 R15: 0000000000022000 [ 3182.609943] Kernel Offset: disabled [ 3182.613563] Rebooting in 86400 seconds..