Extracting prog: 5m52.33473319s Minimizing prog: 59m20.353264023s Simplifying prog options: 2m14.971038346s Extracting C: 56.047249377s Simplifying C: 0s extracting reproducer from 38 programs testing a last program of every proc single: executing 8 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-socket$netlink-socket-syz_open_procfs$namespace-bpf$BPF_PROG_QUERY-sendmsg$IPVS_CMD_SET_INFO-getsockname$packet-socket$inet6_tcp-syz_emit_ethernet-setsockopt$inet6_tcp_int-ioctl$sock_inet_SIOCSIFNETMASK-socket$nl_generic-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_DISCONNECT-setsockopt$inet6_tcp_int-connect$inet6-sendmsg$nl_route-socket$nl_route-sendmsg$nl_route detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r3, 0x11, 0x0, 0x4, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000480)={@empty, @empty, @void, {@canfd={0xd, {{0x1, 0x1, 0x1}, 0x15, 0x1, 0x0, 0x0, "a1e7c4d64f0f48b48b7fb36ab7c0116ed53fd6254edd95fcca6a15d7e387a472704ae334cc1340986c1c1538508a9204dd277e3daee843c95d7cc8f210e2f669"}}}}, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000040)=0x100000001, 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000340)={'batadv0\x00', {0x2, 0x4e20, @local}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r8, 0x1, 0x2, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x401c404) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, r8, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x9, &(0x7f0000000440)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x100c0}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_CREATE_VCPU-ioctl$KVM_CREATE_VCPU-ioctl$KVM_HAS_DEVICE_ATTR_vcpu-socket$inet6_sctp-connect$inet6-sendto$inet6-execve-openat$vnet-ioctl$int_in-openat$tun-ioctl$TUNSETIFF-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-dup-ioctl$VHOST_NET_SET_BACKEND-socket$netlink-ioctl$SIOCSIFHWADDR-pipe2-syz_open_dev$dri-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-read$FUSE-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-close_range-socket$inet6_mptcp-setsockopt$SO_TIMESTAMP-shutdown-socket$nl_xfrm-sendmsg$nl_xfrm-getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER detailed listing: executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r0, 0x4018aee3, &(0x7f0000000080)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f00000000c0)=0x1d}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffe, 0x10000, @local, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) execve(0x0, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000000)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x0, r4}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r7, 0xc028644b, &(0x7f0000000100)={0x0, 0x19, 0x6c0000, 0xc35, 0xffffffff, 0x0, 0x0, 0x2}) read$FUSE(r6, &(0x7f0000001000)={0x2020}, 0x2020) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) shutdown(r1, 0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x1a0, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x0, 0x0, 0x70bd28, 0xeaa}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f0000000180), &(0x7f0000000440)=0x8) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$I2C-socket$inet6-sendto$inet6-ioctl$I2C_SLAVE-bpf$PROG_LOAD detailed listing: executing program 0: r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd500"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) ioctl$I2C_SLAVE(r0, 0x703, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-socket$netlink-epoll_create1-ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL-ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL-prctl$PR_SET_MM_MAP-io_uring_setup-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-socket-ioctl$HIDIOCGUSAGE-ioctl$HIDIOCINITREPORT-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-close_range-add_key$keyring-add_key-memfd_create-socket$phonet-add_key-setsockopt$SO_BINDTODEVICE-sendto$phonet-pread64 detailed listing: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x2, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x10, 0x1, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000300)={'ip_vti0\x00', r1, 0x700, 0xf701, 0x4f, 0xbd, {{0x1d, 0x4, 0x0, 0x3, 0x74, 0x67, 0x0, 0xa5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@end, @ssrr={0x89, 0xf, 0x5e, [@dev={0xac, 0x14, 0x14, 0x14}, @multicast2, @local]}, @lsrr={0x83, 0xf, 0x41, [@empty, @rand_addr=0x64010101, @empty]}, @lsrr={0x83, 0xb, 0x70, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x2c, 0x39, 0x3, 0x0, [{@empty, 0x1ff}, {@multicast1, 0x5}, {@private=0xa010100, 0x2}, {@rand_addr=0x64010100, 0x5}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x9}]}, @generic={0x82, 0x8, "da3bc6bc3161"}, @end]}}}}}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x2153, 0xc000, 0x8, 0xc1, 0x0, r0}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) socket(0x1, 0x803, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) ioctl$HIDIOCINITREPORT(r3, 0x4805, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000008c0)="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", 0x1000, r5) r6 = memfd_create(&(0x7f00000018c0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8b\x0fp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe93\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\x01\x00\x00\x00\x00\x00\x00\x001\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd61\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xff\x03\x00\x00\x00\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7I&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S\x00'/887, 0x6) r7 = socket$phonet(0x23, 0x2, 0x1) add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="a16ec6a7ba240b7f1e3e4fe34d29b69d98423e2d028c5e7f08e6395bac21399963e15ffbec3bd6db421d7718e8ba99885f3c12d24bf0c98bbee7c53bbef2d2fcee42d347", 0x44, r5) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) sendto$phonet(r7, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0x0, 0x1}, 0x10) pread64(r6, 0x0, 0x0, 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-socket$xdp-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, r6], 0x6, 0x2, 0x1}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) r8 = socket$xdp(0x2c, 0x3, 0x0) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r4, 0xc008644c, &(0x7f0000002b00)={r10}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r11, r6, r6, r5, r6], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(r8, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r7}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r12 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r12, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r9, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-socket$xdp-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, r6], 0x6, 0x2, 0x1}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) r8 = socket$xdp(0x2c, 0x3, 0x0) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r4, 0xc008644c, &(0x7f0000002b00)={r10}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r11, r6, r6, r5, r6], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(r8, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r7}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r12 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r12, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r9, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine single: successfully extracted reproducer found reproducer with 30 syscalls minimizing guilty program testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-socket$xdp-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, r6], 0x6, 0x2, 0x1}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) r8 = socket$xdp(0x2c, 0x3, 0x0) read$FUSE(r4, &(0x7f0000000a80)={0x2020}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r4, 0xc008644c, &(0x7f0000002b00)={r9}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r10, r6, r6, r5, r6], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(r8, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r7}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r11 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r11, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-socket$xdp-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, r6], 0x6, 0x2, 0x1}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) r8 = socket$xdp(0x2c, 0x3, 0x0) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r4, 0xc008644c, &(0x7f0000002b00)={r10}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r11, r6, r6, r5, r6], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(r8, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r7}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r12 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r12, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) move_pages(r9, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-socket$xdp-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, r6], 0x6, 0x2, 0x1}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) r8 = socket$xdp(0x2c, 0x3, 0x0) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r4, 0xc008644c, &(0x7f0000002b00)={r10}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r11, r6, r6, r5, r6], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(r8, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r7}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r9, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-socket$xdp-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, r6], 0x6, 0x2, 0x1}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) r8 = socket$xdp(0x2c, 0x3, 0x0) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r4, 0xc008644c, &(0x7f0000002b00)={r10}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r11, r6, r6, r5, r6], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(r8, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r7}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r9, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-socket$xdp-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, r6], 0x6, 0x2, 0x1}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) r8 = socket$xdp(0x2c, 0x3, 0x0) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r4, 0xc008644c, &(0x7f0000002b00)={r10}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r11, r6, r6, r5, r6], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(r8, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r7}) r12 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r12, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r9, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-socket$xdp-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, r6], 0x6, 0x2, 0x1}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) r7 = socket$xdp(0x2c, 0x3, 0x0) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r4, 0xc008644c, &(0x7f0000002b00)={r9}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r10, r6, r6, r5, r6], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(r7, &(0x7f0000002c80)=""/147) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r11 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r11, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r8, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-socket$xdp-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, r6], 0x6, 0x2, 0x1}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) socket$xdp(0x2c, 0x3, 0x0) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r4, 0xc008644c, &(0x7f0000002b00)={r9}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r10, r6, r6, r5, r6], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r7}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r11 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r11, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r8, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-socket$xdp-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, r6], 0x6, 0x2, 0x1}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) r8 = socket$xdp(0x2c, 0x3, 0x0) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r4, 0xc008644c, &(0x7f0000002b00)={r10}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) fstatfs(r8, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r7}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r11 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r11, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r9, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-socket$xdp-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, r6], 0x6, 0x2, 0x1}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) r8 = socket$xdp(0x2c, 0x3, 0x0) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r4, 0xc008644c, &(0x7f0000002b00)={r10}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[0x0, r6, r6, r5, r6], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(r8, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r7}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r11 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r11, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r9, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-socket$xdp-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, r6], 0x6, 0x2, 0x1}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) r8 = socket$xdp(0x2c, 0x3, 0x0) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r4, 0xc008644c, &(0x7f0000002b00)={r10}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r11, r6, r6, r5, r6], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(r8, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r7}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r12 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r12, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r9, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-socket$xdp-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, r6], 0x6, 0x2, 0x1}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) r8 = socket$xdp(0x2c, 0x3, 0x0) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r10, r6, r6, r5, r6], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(r8, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r7}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r11 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r11, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r9, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-socket$xdp-read$FUSE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, r6], 0x6, 0x2, 0x1}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) r8 = socket$xdp(0x2c, 0x3, 0x0) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r10, r6, r6, r5, r6], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(r8, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r7}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r11 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r11, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r9, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-socket$xdp-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, r6], 0x6, 0x2, 0x1}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) r8 = socket$xdp(0x2c, 0x3, 0x0) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r9, r6, r6, r5, r6], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(r8, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r7}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r10 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r10, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(0x0, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, r6], 0x6, 0x2, 0x1}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r9, r6, r6, r5, r6], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r7}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r10 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r10, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r8, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, r6], 0x6, 0x2, 0x1}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r9, r6, r6, r5, r6], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r7}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r10 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r10, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r8, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, r6], 0x6, 0x2, 0x1}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r8, r6, r6, r5, r6], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r9 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r9, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r7, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r9, r6, r6, r5, r6], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r7}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r10 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r10, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r8, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, 0x0], 0x6, 0x2, 0x1}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r8, 0x0, 0x0, r5, 0x0], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r6}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r9 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r9, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r7, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[0x0, r5], 0x6, 0x2, 0x1}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r8, r5, r5, 0x0, r5], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r6}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r9 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r9, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r7, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-write$UHID_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, r6], 0x6, 0x2, 0x1}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r9, r6, r6, r5, r6], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r7}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r10 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r10, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r8, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-openat$dlm_monitor-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x200802, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r5, r6], 0x6, 0x2, 0x1}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000002b80)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r9, r6, r6, r5, r6], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002d40)={0x2, r7}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r10 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r10, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r8, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-ioctl$DRM_IOCTL_MODE_GETPROPERTY-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000006c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], r3, 0x0, '\x00', 0x5, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r4, r5], 0x6, 0x2, 0x1}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r8, r5, r5, r4, r5], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r6}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r9 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r9, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r7, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r3, r4], 0x6, 0x2, 0x1}) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r7, r4, r4, r3, r4], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r5}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r8 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r8, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r6, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000001, 0x80000001, 0x4}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r3, r4], 0x6, 0x2, 0x1}) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r7, r4, r4, r3, r4], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r5}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r8 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r8, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r6, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0xddf, 0xa200) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r3, r4], 0x6, 0x2, 0x1}) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r7, r4, r4, r3, r4], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r5}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r8 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r8, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r6, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r2, r3], 0x6, 0x2, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r6, r3, r3, r2, r3], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r4}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r7 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r7, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r5, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$DRM_IOCTL_MODE_GETGAMMA-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0xc003, 0x3, 0x80, 0xfffa, 0x40, 0x8, 0x4, 0x4], &(0x7f0000000100)=[0x100, 0x3, 0x9, 0x7ff, 0x1, 0xfff1, 0x88a], &(0x7f0000000140)=[0xf, 0x9, 0x2, 0x8000, 0xffaf, 0x2, 0x2, 0x51, 0x2, 0x8]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r2, r3], 0x6, 0x2, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r6, r3, r3, r2, r3], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r4}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r7 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r7, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r5, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$DRM_IOCTL_MODE_GETPLANE-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r1, r2], 0x6, 0x2, 0x1}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r5, r2, r2, r1, r2], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r3}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r6 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r6, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r4, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r1, r2], 0x6, 0x2, 0x1}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r5, r2, r2, r1, r2], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r3}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r6 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r6, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r4, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r0, r1], 0x6, 0x2, 0x1}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r4, r1, r1, r0, r1], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r2}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r5 = signalfd(0xffffffffffffffff, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r5, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r3, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r1, r2], 0x6, 0x2, 0x1}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r5, r2, r2, r1, r2], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r3}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r6 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r6, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r4, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r1, r2], 0x6, 0x2, 0x1}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r5, r2, r2, r1, r2], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r3}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r6 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r6, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r4, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r1, r2], 0x6, 0x2, 0x1}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r5, r2, r2, r1, r2], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r3}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r6 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r6, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r4, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x7, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r1, r2], 0x6, 0x2, 0x1}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r5, r2, r2, r1, r2], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r3}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r6 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r6, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r4, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x1, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r1, r2], 0x6, 0x2, 0x1}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r5, r2, r2, r1, r2], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r3}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r6 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r6, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r4, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r1, r2], 0x6, 0x2, 0x1}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r5, r2, r2, r1, r2], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r3}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r6 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r6, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r4, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r1, r2], 0x6, 0x2, 0x1}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r5, r2, r2, r1, r2], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r3}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r6 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r6, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r4, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r1, r2], 0x6, 0x2, 0x1}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r5, r2, r2, r1, r2], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r3}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r6 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r6, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r4, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r1, r2], 0x6, 0x2, 0x1}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r5, r2, r2, r1, r2], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r3}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r6 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r6, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r4, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r1, r2], 0x6, 0x2, 0x1}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r5, r2, r2, r1, r2], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r3}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r6 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r6, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r4, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r1, r2], 0x6, 0x2, 0x1}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r5, r2, r2, r1, r2], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r3}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r6 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r6, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r4, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[0x0, r1], 0x6, 0x2, 0x1}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r4, r1, r1, 0x0, r1], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r2}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r5 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r5, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r3, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000009c0)={&(0x7f0000000980)=[r1, 0x0], 0x6, 0x2, 0x1}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r4, 0x0, 0x0, r1, 0x0], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r2}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r5 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r5, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r3, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r5, r2, r2, r1, r2], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r3}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r6 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r6, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r4, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r5, r2, r2, r1, r2], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r3}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r6 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r6, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r4, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r5, r2, r2, r1, r2], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r3}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r6 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r6, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r4, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r4, r2, r2, r1, r2], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r3}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r5 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r5, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(0x0, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, 0x0) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000002b40)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r5, r2, r2, r1, r2], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r3}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r6 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r6, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r4, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[r5, r2, r2, r1, r2], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r3}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r6 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r6, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r4, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0)=[0x0, r2, r2, r1, r2], &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x5, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r3}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r5 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r5, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r4, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r1}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r3 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r3, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r2, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={0x0, &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r1}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r3 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r3, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r2, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r1}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r3 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r3, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r2, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), 0x0, 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r1}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r3 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r3, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r2, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00), 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000002c80)=""/147) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r1}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r3 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r3, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r2, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000002d40)={0x2, r1}) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r3 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r3, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r2, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_open_dev$dri(&(0x7f0000002d80), 0x8, 0x24800) r2 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r2, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r1, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_open_dev$dri(0x0, 0x8, 0x24800) r2 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r2, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r1, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_open_dev$dri(0x0, 0x8, 0x24800) r2 = signalfd(r0, 0x0, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r1, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_open_dev$dri(0x0, 0x8, 0x24800) r2 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r2, 0x6, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r1, 0x1, &(0x7f0000002e40)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_open_dev$dri(0x0, 0x8, 0x24800) r2 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r2, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r1, 0x0, 0x0, &(0x7f0000002e80)=[0x48ad31d, 0xffff5d7d, 0x9b, 0x6], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_open_dev$dri(0x0, 0x8, 0x24800) r2 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r2, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r1, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_open_dev$dri(0x0, 0x8, 0x24800) r2 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r2, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_open_dev$dri(0x0, 0x8, 0x24800) r2 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r2, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r1, 0x0, 0x0, 0x0, &(0x7f0000002ec0), 0x6) program did not crash extracting C reproducer testing compiled C program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages program did not crash simplifying guilty program options testing program (duration=33.051605499s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_open_dev$dri(0x0, 0x8, 0x24800) r2 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r2, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r1, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_open_dev$dri(0x0, 0x8, 0x24800) r2 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r2, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r1, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_open_dev$dri(0x0, 0x8, 0x24800) r2 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r2, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r1, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_open_dev$dri(0x0, 0x8, 0x24800) r2 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r2, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r1, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine validation run: crashed=true testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_open_dev$dri(0x0, 0x8, 0x24800) r2 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r2, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r1, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash validation run: crashed=false testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_open_dev$dri(0x0, 0x8, 0x24800) r2 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r2, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r1, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash validation run: crashed=false testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_open_dev$dri(0x0, 0x8, 0x24800) r2 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r2, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r1, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine validation run: crashed=true testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_open_dev$dri(0x0, 0x8, 0x24800) r2 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r2, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r1, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash validation run: crashed=false testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_open_dev$dri(0x0, 0x8, 0x24800) r2 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r2, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r1, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program did not crash validation run: crashed=false testing program (duration=33.051605499s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$drirender128-ioctl$FS_IOC_GETFSSYSFSPATH-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-write$UHID_CREATE-ioctl$DRM_IOCTL_WAIT_VBLANK-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_WAIT-openat$dlm_monitor-ioctl$F2FS_IOC_RESIZE_FS-read$FUSE-ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE-ioctl$XFS_IOC_FSGETXATTRA-ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE-ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT-fstatfs-ioctl$VHOST_SET_VRING_KICK-syz_open_dev$dri-signalfd-fcntl$lock-madvise-move_pages detailed listing: executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000380)=[0x0], 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000740), 0x0, 0x41b, 0x9, 0x9, 0x3, 0x3a}}, 0x120) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x1, 0xffff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x40302, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000a40)=0x57d9) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000002ac0)={0x0, 0x1, 0x340000, 0xafa8, 0xff, 0x0, 0x81, 0x8000000000000000}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002b80)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000002c40)={&(0x7f0000002bc0), &(0x7f0000002c00)=[0xffff, 0xece, 0x9], 0x2, 0x0, 0x1}) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_open_dev$dri(0x0, 0x8, 0x24800) r2 = signalfd(r0, &(0x7f0000002dc0)={[0x4]}, 0x8) fcntl$lock(r2, 0x6, &(0x7f0000002e00)={0x0, 0x3, 0xfffffffffffffe01, 0x292}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) move_pages(r1, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) program crashed: lost connection to test machine validation run: crashed=true reproducing took 1h14m32.41830149s repro crashed as (corrupted=false): final repro crashed as (corrupted=false):