)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000800)}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000740)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:41 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f00000001c0)=[0x3f, 0x0, 0xffffffff, 0x423, 0xf848], 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x1, 0xe5db, 0x3fb, 0x5], 0x5, 0x80000}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x0, 0x0, 0x10001}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1000000000001, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x141000) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000040)=0x8) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) 15:46:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)={0x6c4}) 15:46:41 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000a28710af866d970861f43d", @ANYRES16=r1, @ANYBLOB="04002cbd7000fedbdf25090000000c0099001f000000090000000a0006000802110000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20048045) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x8, 0x4, 0x60000000], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x0, 0x70bd2b, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) getsockname$l2tp(r6, &(0x7f0000000340)={0x2, 0x0, @local}, &(0x7f0000000500)=0x10) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r5, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x1e}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0c0ef882430847628f022a4e12"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000400)=[0x5, 0xfffffff9], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r7, 0x8010af78, &(0x7f0000000480)) 15:46:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1000000000001, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x141000) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000040)=0x8) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) 15:46:41 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) socketpair(0x1e, 0x800, 0x2e, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) (async, rerun: 64) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000100)) (async, rerun: 64) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000000)={0x1, 0x3a}, 0x2) 15:46:41 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge_slave_1\x00'}}, 0x1e) 15:46:41 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) syz_open_dev$media(&(0x7f0000000040), 0x8, 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x8000001ffe, 0x101) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8000001ffe, 0x101) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000680)={0x0, 0x129, 0x0, &(0x7f00000000c0)=[{}, {}, {}], 0x6, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000800)}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000740)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)={0x6c4}) 15:46:41 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000a28710af866d970861f43d", @ANYRES16=r1, @ANYBLOB="04002cbd7000fedbdf25090000000c0099001f000000090000000a0006000802110000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20048045) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x8, 0x4, 0x60000000], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x0, 0x70bd2b, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) getsockname$l2tp(r6, &(0x7f0000000340)={0x2, 0x0, @local}, &(0x7f0000000500)=0x10) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r5, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x1e}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0c0ef882430847628f022a4e12"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000400)=[0x5, 0xfffffff9], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r7, 0x8010af78, &(0x7f0000000480)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000a28710af866d970861f43d", @ANYRES16=r1, @ANYBLOB="04002cbd7000fedbdf25090000000c0099001f000000090000000a0006000802110000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20048045) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x8, 0x4, 0x60000000], 0x4, 0x80000}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) (async) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) (async) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x0, 0x70bd2b, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) (async) getsockname$l2tp(r6, &(0x7f0000000340)={0x2, 0x0, @local}, &(0x7f0000000500)=0x10) (async) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r5, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x1e}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0c0ef882430847628f022a4e12"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000400)=[0x5, 0xfffffff9], 0x2, 0x80000}) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r7, 0x8010af78, &(0x7f0000000480)) (async) 15:46:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1000000000001, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x141000) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000040)=0x8) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) 15:46:41 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge_slave_1\x00'}}, 0x1e) 15:46:41 executing program 5: ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000380)=0x9) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x4, 0x3f, 0x56, 0xfffffffe, 0x100, 0x80], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000200)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) openat$md(0xffffffffffffff9c, &(0x7f0000000480), 0xad0401, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffffff}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x604001, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000400)) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000003c0)) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000280)=""/245) 15:46:41 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000a28710af866d970861f43d", @ANYRES16=r1, @ANYBLOB="04002cbd7000fedbdf25090000000c0099001f000000090000000a0006000802110000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20048045) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x8, 0x4, 0x60000000], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) (async) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x0, 0x70bd2b, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) (async) getsockname$l2tp(r6, &(0x7f0000000340)={0x2, 0x0, @local}, &(0x7f0000000500)=0x10) (async) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r5, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x1e}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0c0ef882430847628f022a4e12"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000400)=[0x5, 0xfffffff9], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r7, 0x8010af78, &(0x7f0000000480)) 15:46:41 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) (async) syz_open_dev$media(&(0x7f0000000040), 0x8, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8000001ffe, 0x101) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000680)={0x0, 0x129, 0x0, &(0x7f00000000c0)=[{}, {}, {}], 0x6, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000800)}) (async) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000740)) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)={0x6c4}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) (async) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)={0x6c4}) (async) 15:46:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000000c0)={0x0, 0x81, {}, {0xee01}, 0xffffffffffffffff, 0x200}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xffff8000, 0x7}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) 15:46:42 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge_slave_1\x00'}}, 0x1e) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge_slave_1\x00'}}, 0x1e) (async) 15:46:42 executing program 5: ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) (async, rerun: 64) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000380)=0x9) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x4, 0x3f, 0x56, 0xfffffffe, 0x100, 0x80], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000200)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) openat$md(0xffffffffffffff9c, &(0x7f0000000480), 0xad0401, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffffff}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x604001, 0x0) (async) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000400)) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000003c0)) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000280)=""/245) 15:46:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xa840) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000001c0)={0x7, 0x0, 0x7f, 0x6c6}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000100)={r3, &(0x7f0000000080)=""/97}) 15:46:42 executing program 1: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000200)=""/4083) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) 15:46:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000000c0)={0x0, 0x81, {}, {0xee01}, 0xffffffffffffffff, 0x200}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xffff8000, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) 15:46:42 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xa840) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000001c0)={0x7, 0x0, 0x7f, 0x6c6}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000100)={r3, &(0x7f0000000080)=""/97}) 15:46:42 executing program 5: ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000380)=0x9) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x4, 0x3f, 0x56, 0xfffffffe, 0x100, 0x80], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000200)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) openat$md(0xffffffffffffff9c, &(0x7f0000000480), 0xad0401, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffffff}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x604001, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000400)) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000003c0)) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000280)=""/245) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000380)=0x9) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x4, 0x3f, 0x56, 0xfffffffe, 0x100, 0x80], 0x6, 0x800}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000200)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000480), 0xad0401, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x604001, 0x0) (async) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000400)) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000280)=""/245) (async) 15:46:42 executing program 1: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000200)=""/4083) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) 15:46:42 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000000c0)={0x0, 0x81, {}, {0xee01}, 0xffffffffffffffff, 0x200}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xffff8000, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) 15:46:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xa840) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000001c0)={0x7, 0x0, 0x7f, 0x6c6}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000100)={r3, &(0x7f0000000080)=""/97}) 15:46:42 executing program 1: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000200)=""/4083) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) 15:46:42 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x8, 0xfffffffe, {}, {r1}, 0x100000001, 0x1}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000280)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r4}) 15:46:42 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) 15:46:42 executing program 1: socket$pppoe(0x18, 0x1, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)={0x2, 0x800}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000b00)) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x183a00) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000080)=0xfffffffe) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 15:46:42 executing program 3: ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000140)={&(0x7f00000000c0)="d9c9f733e50a63525d7fce7c10b104b7b131f44b49abe5d250dbc656b8136647ae95a7156e8071113af383c328d6ae4e1d4c3babe5bd22fc7bf2a44dd6beb930520935f68242d53a11345a20c9417db7d9e342", 0x53}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)="51befafbf537ba190317b37f11e684391d6332021f12479cea0f79a724a6106d06959e2969ba12b7e7aa60b62ecefabe0f3994b5ab8a7261e87a93e4b71f313cce29f60a2552d9107cd896b7a2b3e59e5e81d5d73e5ad08a63c98496fe9ef9613ededc151e442d85353fd53d35f9fa00ceddf39b25cd6aa55993f949a7087acec29bf985eb6ff1d4e9181b0e67296db56780e2bbc1ee674ebeb6bc5b2c35e3d0faa422ea75d079149b065281aa2251cf3d631d78dc4a578ee76235740a354cf388b611f4cafb136e306a12e7ce6f27a46e74db1f63e4b036ba554d58b12f2a5e1a918af51f0f", 0xe6}) 15:46:42 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x6], 0x1, 0xc0800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000100)={0x8000, 0x7, 0x3}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:46:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000100)=[0x3, 0x6, 0x7fff, 0x40, 0x9], 0x5, 0x800}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000000c0)={r2}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000480)={0x60000000, 0x8, 0x4, 0xeb, &(0x7f0000000200)=""/235, 0x83, &(0x7f0000000300)=""/131, 0x8c, &(0x7f00000003c0)=""/140}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) 15:46:42 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r1 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x8, 0xfffffffe, {}, {r1}, 0x100000001, 0x1}) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000280)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r4}) 15:46:42 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)) 15:46:42 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)) 15:46:42 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000100)=[0x3, 0x6, 0x7fff, 0x40, 0x9], 0x5, 0x800}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000000c0)={r2}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000480)={0x60000000, 0x8, 0x4, 0xeb, &(0x7f0000000200)=""/235, 0x83, &(0x7f0000000300)=""/131, 0x8c, &(0x7f00000003c0)=""/140}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) 15:46:42 executing program 1: socket$pppoe(0x18, 0x1, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)={0x2, 0x800}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000b00)) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x183a00) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000080)=0xfffffffe) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) socket$pppoe(0x18, 0x1, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)={0x2, 0x800}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000b00)) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x183a00) (async) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) (async) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000080)=0xfffffffe) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) (async) 15:46:42 executing program 3: ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000140)={&(0x7f00000000c0)="d9c9f733e50a63525d7fce7c10b104b7b131f44b49abe5d250dbc656b8136647ae95a7156e8071113af383c328d6ae4e1d4c3babe5bd22fc7bf2a44dd6beb930520935f68242d53a11345a20c9417db7d9e342", 0x53}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)="51befafbf537ba190317b37f11e684391d6332021f12479cea0f79a724a6106d06959e2969ba12b7e7aa60b62ecefabe0f3994b5ab8a7261e87a93e4b71f313cce29f60a2552d9107cd896b7a2b3e59e5e81d5d73e5ad08a63c98496fe9ef9613ededc151e442d85353fd53d35f9fa00ceddf39b25cd6aa55993f949a7087acec29bf985eb6ff1d4e9181b0e67296db56780e2bbc1ee674ebeb6bc5b2c35e3d0faa422ea75d079149b065281aa2251cf3d631d78dc4a578ee76235740a354cf388b611f4cafb136e306a12e7ce6f27a46e74db1f63e4b036ba554d58b12f2a5e1a918af51f0f", 0xe6}) 15:46:42 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x6], 0x1, 0xc0800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000100)={0x8000, 0x7, 0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:46:42 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x8, 0xfffffffe, {}, {r1}, 0x100000001, 0x1}) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000280)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r4}) 15:46:42 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)) (async) 15:46:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000100)=[0x3, 0x6, 0x7fff, 0x40, 0x9], 0x5, 0x800}) (async) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000000c0)={r2}) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000480)={0x60000000, 0x8, 0x4, 0xeb, &(0x7f0000000200)=""/235, 0x83, &(0x7f0000000300)=""/131, 0x8c, &(0x7f00000003c0)=""/140}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) 15:46:42 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x7fff) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) 15:46:42 executing program 1: socket$pppoe(0x18, 0x1, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)={0x2, 0x800}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000b00)) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x183a00) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000080)=0xfffffffe) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) socket$pppoe(0x18, 0x1, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)={0x2, 0x800}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000b00)) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x183a00) (async) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) (async) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000080)=0xfffffffe) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) (async) 15:46:42 executing program 3: ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000140)={&(0x7f00000000c0)="d9c9f733e50a63525d7fce7c10b104b7b131f44b49abe5d250dbc656b8136647ae95a7156e8071113af383c328d6ae4e1d4c3babe5bd22fc7bf2a44dd6beb930520935f68242d53a11345a20c9417db7d9e342", 0x53}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)="51befafbf537ba190317b37f11e684391d6332021f12479cea0f79a724a6106d06959e2969ba12b7e7aa60b62ecefabe0f3994b5ab8a7261e87a93e4b71f313cce29f60a2552d9107cd896b7a2b3e59e5e81d5d73e5ad08a63c98496fe9ef9613ededc151e442d85353fd53d35f9fa00ceddf39b25cd6aa55993f949a7087acec29bf985eb6ff1d4e9181b0e67296db56780e2bbc1ee674ebeb6bc5b2c35e3d0faa422ea75d079149b065281aa2251cf3d631d78dc4a578ee76235740a354cf388b611f4cafb136e306a12e7ce6f27a46e74db1f63e4b036ba554d58b12f2a5e1a918af51f0f", 0xe6}) (rerun: 32) 15:46:42 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x6], 0x1, 0xc0800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000100)={0x8000, 0x7, 0x3}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:46:42 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f0000000140)={0x1, 0x800}) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x44}, 0x101}, {0xa, 0x4e22, 0x40, @private1}, 0xffffffffffffffff, 0x40}}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 15:46:42 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x7fff) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) 15:46:42 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f0000000140)={0x1, 0x800}) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x44}, 0x101}, {0xa, 0x4e22, 0x40, @private1}, 0xffffffffffffffff, 0x40}}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 15:46:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4cac138a, 0x141901) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000140)={0x0, 0xc}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x8076, 0x2) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000001280)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={r3, &(0x7f00000001c0)=""/4096}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000011c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000001200)={0x8, 0x6, 0xa1}) 15:46:43 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x0, {0xa, 0x4e20, 0x7, @empty, 0x8}, r1}}, 0x38) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xfffffffb, 0x8], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x204, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8906, 0x0) 15:46:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0x6, 0x1eda, 0x10000, 0x1400000}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000100)={r1, 0x8}) 15:46:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x401, 0x3d, {0x0}, {r1}, 0x794f, 0x9}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) r4 = geteuid() r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x20, 0xfffffff8, {r2}, {r4}, 0x0, 0xa0}) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000002c0)={0x46, &(0x7f0000000240)="3ec6755112fc2d4235b88f0820dc40bf5bfb90081a9411ede21ec9754e53557078d08d5c9cd06264357b286c6fea6256b19976dc052909247232afd628ee8e83f0a4bdaf133a"}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r3}) 15:46:43 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x7fff) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) 15:46:43 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f0000000140)={0x1, 0x800}) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x44}, 0x101}, {0xa, 0x4e22, 0x40, @private1}, 0xffffffffffffffff, 0x40}}, 0x48) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000000)={'wlan1\x00'}) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 15:46:43 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x0, {0xa, 0x4e20, 0x7, @empty, 0x8}, r1}}, 0x38) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xfffffffb, 0x8], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x204, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x94) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8906, 0x0) (rerun: 32) 15:46:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4cac138a, 0x141901) (rerun: 32) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000140)={0x0, 0xc}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x8076, 0x2) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000001280)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={r3, &(0x7f00000001c0)=""/4096}) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000011c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000001200)={0x8, 0x6, 0xa1}) 15:46:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x401, 0x3d, {0x0}, {r1}, 0x794f, 0x9}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) r4 = geteuid() r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x20, 0xfffffff8, {r2}, {r4}, 0x0, 0xa0}) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000002c0)={0x46, &(0x7f0000000240)="3ec6755112fc2d4235b88f0820dc40bf5bfb90081a9411ede21ec9754e53557078d08d5c9cd06264357b286c6fea6256b19976dc052909247232afd628ee8e83f0a4bdaf133a"}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r3}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x401, 0x3d, {}, {r1}, 0x794f, 0x9}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) (async) geteuid() (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x20, 0xfffffff8, {r2}, {r4}, 0x0, 0xa0}) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000002c0)={0x46, &(0x7f0000000240)="3ec6755112fc2d4235b88f0820dc40bf5bfb90081a9411ede21ec9754e53557078d08d5c9cd06264357b286c6fea6256b19976dc052909247232afd628ee8e83f0a4bdaf133a"}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r3}) (async) 15:46:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000080)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) (async, rerun: 32) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0x6, 0x1eda, 0x10000, 0x1400000}) (async, rerun: 32) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000100)={r1, 0x8}) 15:46:43 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x149201, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000000)) 15:46:43 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan1\x00'}) 15:46:43 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x0, {0xa, 0x4e20, 0x7, @empty, 0x8}, r1}}, 0x38) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xfffffffb, 0x8], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x204, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8906, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8906, 0x0) 15:46:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4cac138a, 0x141901) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000140)={0x0, 0xc}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x8076, 0x2) (rerun: 32) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000001280)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={r3, &(0x7f00000001c0)=""/4096}) (async, rerun: 64) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000011c0), 0x1, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000001200)={0x8, 0x6, 0xa1}) 15:46:43 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0x6, 0x1eda, 0x10000, 0x1400000}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000100)={r1, 0x8}) (async) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000100)={r1, 0x8}) 15:46:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x401, 0x3d, {0x0}, {r1}, 0x794f, 0x9}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) (rerun: 64) r4 = geteuid() (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x20, 0xfffffff8, {r2}, {r4}, 0x0, 0xa0}) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000002c0)={0x46, &(0x7f0000000240)="3ec6755112fc2d4235b88f0820dc40bf5bfb90081a9411ede21ec9754e53557078d08d5c9cd06264357b286c6fea6256b19976dc052909247232afd628ee8e83f0a4bdaf133a"}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r3}) 15:46:43 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x149201, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000000)) 15:46:43 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan1\x00'}) 15:46:43 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) socket(0x29, 0x5, 0x400) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000040), 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x90b40, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) 15:46:43 executing program 5: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x149201, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x149201, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000000)) 15:46:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000001c0)="55d8ce01cfd035ebdfdd8050856bdb821d0b84c57432e8b51fc48f0dcfd68f067ec6789538dc1571afe72ef508000000958b76edf6059208254ad23eed1c170845972d7598e804bd2677361fca3172125a5b0630a8c0e946dde9777cd2ee68b72b9ed805dffbe6ed1cd85097aca568ab827997d45ff06deae76dca5134537f3b5cb0a1b5ffd20a88991d46dc79", 0x8d}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x3, 0x0, 0x1}) 15:46:43 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan1\x00'}) 15:46:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x10003) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x82003, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000440)={r2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000200)="eb6e47cc69a8e153baa577126d884cef0e9d342b5acd46d79d619da7445f3e95f50a95973fe3b70b2c475778e716010fc78aa1160d09222635835847abfff884a6f1cc170fb4ab641782df06047c97c7ae4ca4a1135331162fc84d4064a100bc54d15ce963bc3fce7000ee365e5a3ce449d4dbd8d53f7a29b657b8f0805ee09a839089951c54ef4cfc36f6a096ca48de3a1557c4242993a683fa9d542fe6e92510753bff3bcb81357e1c2b69b94bcd23c15d59172f888b6b6b0c451bbfb62dfd36874c57815ccf72f798453761803a77bfe7b88ac73f4ed939c8546d4210cefec1b011", 0xe3, 0x0}) syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x3, 0x8b, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000480)={0x2, 0x0, 0x1}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f00000004c0)={0x1000, 0x3ff, 0x2, 0x89}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f00000001c0)={r3}) r7 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x480) ioctl$DRM_IOCTL_SET_UNIQUE(r7, 0x40106410, &(0x7f0000000380)={0x40, &(0x7f0000000340)="5656642dcba31b43253b59b771b2f83020bf35eaa154359ded170605f698a51b9b48bddeee66b614a05bd5afee0f550dc4823ea8c68416f86494b01db07e59a0"}) 15:46:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x90b40, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) 15:46:43 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) socket(0x29, 0x5, 0x400) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000040), 0xfffffffffffffffe) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000001c0)="55d8ce01cfd035ebdfdd8050856bdb821d0b84c57432e8b51fc48f0dcfd68f067ec6789538dc1571afe72ef508000000958b76edf6059208254ad23eed1c170845972d7598e804bd2677361fca3172125a5b0630a8c0e946dde9777cd2ee68b72b9ed805dffbe6ed1cd85097aca568ab827997d45ff06deae76dca5134537f3b5cb0a1b5ffd20a88991d46dc79", 0x8d}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x3, 0x0, 0x1}) 15:46:43 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:43 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000140)={0x0, 0x49}, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x7, 0xe, 0x81, 0xe3, 0x0, 0x6, 0x200, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x81, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x18, 0x0, 0x9, 0x6, 0x200, 0x5, 0x49, 0x0, 0x4, 0x0, 0x1}, r1, 0x2, r2, 0x1) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={0x0, 0x7}) 15:46:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x10003) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x82003, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000440)={r2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000200)="eb6e47cc69a8e153baa577126d884cef0e9d342b5acd46d79d619da7445f3e95f50a95973fe3b70b2c475778e716010fc78aa1160d09222635835847abfff884a6f1cc170fb4ab641782df06047c97c7ae4ca4a1135331162fc84d4064a100bc54d15ce963bc3fce7000ee365e5a3ce449d4dbd8d53f7a29b657b8f0805ee09a839089951c54ef4cfc36f6a096ca48de3a1557c4242993a683fa9d542fe6e92510753bff3bcb81357e1c2b69b94bcd23c15d59172f888b6b6b0c451bbfb62dfd36874c57815ccf72f798453761803a77bfe7b88ac73f4ed939c8546d4210cefec1b011", 0xe3, 0x0}) syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x800) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x3, 0x8b, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000480)={0x2, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000480)={0x2, 0x0, 0x1}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f00000004c0)={0x1000, 0x3ff, 0x2, 0x89}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f00000001c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f00000001c0)={r3}) r7 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x480) ioctl$DRM_IOCTL_SET_UNIQUE(r7, 0x40106410, &(0x7f0000000380)={0x40, &(0x7f0000000340)="5656642dcba31b43253b59b771b2f83020bf35eaa154359ded170605f698a51b9b48bddeee66b614a05bd5afee0f550dc4823ea8c68416f86494b01db07e59a0"}) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r7, 0x40106410, &(0x7f0000000380)={0x40, &(0x7f0000000340)="5656642dcba31b43253b59b771b2f83020bf35eaa154359ded170605f698a51b9b48bddeee66b614a05bd5afee0f550dc4823ea8c68416f86494b01db07e59a0"}) 15:46:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) (async, rerun: 32) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x90b40, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) 15:46:43 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) socket(0x29, 0x5, 0x400) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000040), 0xfffffffffffffffe) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:43 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000001c0)="55d8ce01cfd035ebdfdd8050856bdb821d0b84c57432e8b51fc48f0dcfd68f067ec6789538dc1571afe72ef508000000958b76edf6059208254ad23eed1c170845972d7598e804bd2677361fca3172125a5b0630a8c0e946dde9777cd2ee68b72b9ed805dffbe6ed1cd85097aca568ab827997d45ff06deae76dca5134537f3b5cb0a1b5ffd20a88991d46dc79", 0x8d}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x3, 0x0, 0x1}) (rerun: 64) 15:46:43 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000140)={0x0, 0x49}, 0x2) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x7, 0xe, 0x81, 0xe3, 0x0, 0x6, 0x200, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x81, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x18, 0x0, 0x9, 0x6, 0x200, 0x5, 0x49, 0x0, 0x4, 0x0, 0x1}, r1, 0x2, r2, 0x1) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={0x0, 0x7}) 15:46:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x10003) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x82003, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000440)={r2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000200)="eb6e47cc69a8e153baa577126d884cef0e9d342b5acd46d79d619da7445f3e95f50a95973fe3b70b2c475778e716010fc78aa1160d09222635835847abfff884a6f1cc170fb4ab641782df06047c97c7ae4ca4a1135331162fc84d4064a100bc54d15ce963bc3fce7000ee365e5a3ce449d4dbd8d53f7a29b657b8f0805ee09a839089951c54ef4cfc36f6a096ca48de3a1557c4242993a683fa9d542fe6e92510753bff3bcb81357e1c2b69b94bcd23c15d59172f888b6b6b0c451bbfb62dfd36874c57815ccf72f798453761803a77bfe7b88ac73f4ed939c8546d4210cefec1b011", 0xe3, 0x0}) syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x3, 0x8b, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000480)={0x2, 0x0, 0x1}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f00000004c0)={0x1000, 0x3ff, 0x2, 0x89}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f00000001c0)={r3}) (async) r7 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x480) ioctl$DRM_IOCTL_SET_UNIQUE(r7, 0x40106410, &(0x7f0000000380)={0x40, &(0x7f0000000340)="5656642dcba31b43253b59b771b2f83020bf35eaa154359ded170605f698a51b9b48bddeee66b614a05bd5afee0f550dc4823ea8c68416f86494b01db07e59a0"}) 15:46:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f00000000c0)={0x1, 0x80000001, 0x7, 0x800, 0x6, 0x3ff, 0x29a}) 15:46:43 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:43 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x10000}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) 15:46:43 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8ba525b8b9da1282b5882607d9"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "baf40b473ae8b714384bd77301"}]}, 0x70}, 0x1, 0x0, 0x0, 0x8814}, 0x4000001) 15:46:43 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000140)={0x0, 0x49}, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x7, 0xe, 0x81, 0xe3, 0x0, 0x6, 0x200, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x81, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x18, 0x0, 0x9, 0x6, 0x200, 0x5, 0x49, 0x0, 0x4, 0x0, 0x1}, r1, 0x2, r2, 0x1) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={0x0, 0x7}) 15:46:43 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4280, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x9}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x1, 0xfffffb19, 0x0, 0x8], 0x4, 0x80000}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000240)={0x0, 0x1}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x101801) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000200)={0x0, 0xfffffffffffffffd}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000140)={0x0, 0x3}) 15:46:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f00000000c0)={0x1, 0x80000001, 0x7, 0x800, 0x6, 0x3ff, 0x29a}) 15:46:43 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:43 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf9, 0x0, 0x6, 0x1, 0x0, 0x1, 0x1c132, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x7, 0x7fffffff}, 0x850, 0x0, 0x4, 0xa, 0x4, 0xd04, 0x4, 0x0, 0x6, 0x0, 0x2}, 0x0, 0x2, r0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x6, 0x80, 0x4, 0x5, 0x0, 0x1f, 0x0, 0x8, 0x51112, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x3}, 0x4100, 0x400, 0x3, 0x4, 0x1f, 0x401, 0x400, 0x0, 0xed67, 0x0, 0x5}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) 15:46:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x10000}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) 15:46:43 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4280, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x9}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x1, 0xfffffb19, 0x0, 0x8], 0x4, 0x80000}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000240)={0x0, 0x1}) (async, rerun: 64) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x101801) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000200)={0x0, 0xfffffffffffffffd}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000140)={0x0, 0x3}) (rerun: 64) 15:46:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f00000000c0)={0x1, 0x80000001, 0x7, 0x800, 0x6, 0x3ff, 0x29a}) 15:46:43 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8ba525b8b9da1282b5882607d9"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "baf40b473ae8b714384bd77301"}]}, 0x70}, 0x1, 0x0, 0x0, 0x8814}, 0x4000001) 15:46:43 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) (async) 15:46:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x10000}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) 15:46:43 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) (async, rerun: 32) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f0000000000)) (async, rerun: 32) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf9, 0x0, 0x6, 0x1, 0x0, 0x1, 0x1c132, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x7, 0x7fffffff}, 0x850, 0x0, 0x4, 0xa, 0x4, 0xd04, 0x4, 0x0, 0x6, 0x0, 0x2}, 0x0, 0x2, r0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x6, 0x80, 0x4, 0x5, 0x0, 0x1f, 0x0, 0x8, 0x51112, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x3}, 0x4100, 0x400, 0x3, 0x4, 0x1f, 0x401, 0x400, 0x0, 0xed67, 0x0, 0x5}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) 15:46:44 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4280, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x9}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x1, 0xfffffb19, 0x0, 0x8], 0x4, 0x80000}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000240)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000240)={0x0, 0x1}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x101801) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000200)={0x0, 0xfffffffffffffffd}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000200)={0x0, 0xfffffffffffffffd}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000140)={0x0, 0x3}) 15:46:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000140)={0x4, 0x6}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000240)={0x8001, 0x400, 0x7, 0x1, 0x1c, 0x8}) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000000c0)={0x6e, &(0x7f0000000000)="3e5410150c02bbd1ac9ba9bd6672fddc4c855d054b7da1f0fc88b46fe3a4f2bc0d2b14f46a5335afb35b2c88a98fddf13eec4247c4e167122a78075d656f9528e640f610e6ba23b5aeba58658c693e202ce6887975baeb4b17fac281c44470d39e007d9530224f63d13cb67cfb65"}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x7fff, 0x5, 0x5, 0x5c30e969, 0x3, [0x5, 0x7, 0x273e723a, 0x80000001], [0x8, 0x2af6512d, 0xd62, 0x6742], [0x0, 0x2, 0x2, 0x1], [0x3, 0x9692, 0x7, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) 15:46:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x101000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000240)="25bcb5893cb47d7efb7be8950228d88f066b", 0x12}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000200)=',', 0xe, 0x0}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f00000000c0)=""/84) 15:46:44 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8ba525b8b9da1282b5882607d9"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "baf40b473ae8b714384bd77301"}]}, 0x70}, 0x1, 0x0, 0x0, 0x8814}, 0x4000001) 15:46:44 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 15:46:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000000c0)={0x0, 0x10000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x101000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000240)="25bcb5893cb47d7efb7be8950228d88f066b", 0x12}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000200)=',', 0xe, 0x0}) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000140)={r2}) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f00000000c0)=""/84) 15:46:44 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f0000000000)) (async) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf9, 0x0, 0x6, 0x1, 0x0, 0x1, 0x1c132, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x7, 0x7fffffff}, 0x850, 0x0, 0x4, 0xa, 0x4, 0xd04, 0x4, 0x0, 0x6, 0x0, 0x2}, 0x0, 0x2, r0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x6, 0x80, 0x4, 0x5, 0x0, 0x1f, 0x0, 0x8, 0x51112, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x3}, 0x4100, 0x400, 0x3, 0x4, 0x1f, 0x401, 0x400, 0x0, 0xed67, 0x0, 0x5}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) 15:46:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000140)={0x4, 0x6}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000240)={0x8001, 0x400, 0x7, 0x1, 0x1c, 0x8}) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000000c0)={0x6e, &(0x7f0000000000)="3e5410150c02bbd1ac9ba9bd6672fddc4c855d054b7da1f0fc88b46fe3a4f2bc0d2b14f46a5335afb35b2c88a98fddf13eec4247c4e167122a78075d656f9528e640f610e6ba23b5aeba58658c693e202ce6887975baeb4b17fac281c44470d39e007d9530224f63d13cb67cfb65"}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x7fff, 0x5, 0x5, 0x5c30e969, 0x3, [0x5, 0x7, 0x273e723a, 0x80000001], [0x8, 0x2af6512d, 0xd62, 0x6742], [0x0, 0x2, 0x2, 0x1], [0x3, 0x9692, 0x7, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000140)={0x4, 0x6}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000240)={0x8001, 0x400, 0x7, 0x1, 0x1c, 0x8}) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000000c0)={0x6e, &(0x7f0000000000)="3e5410150c02bbd1ac9ba9bd6672fddc4c855d054b7da1f0fc88b46fe3a4f2bc0d2b14f46a5335afb35b2c88a98fddf13eec4247c4e167122a78075d656f9528e640f610e6ba23b5aeba58658c693e202ce6887975baeb4b17fac281c44470d39e007d9530224f63d13cb67cfb65"}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x7fff, 0x5, 0x5, 0x5c30e969, 0x3, [0x5, 0x7, 0x273e723a, 0x80000001], [0x8, 0x2af6512d, 0xd62, 0x6742], [0x0, 0x2, 0x2, 0x1], [0x3, 0x9692, 0x7, 0x1]}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (async) 15:46:44 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan1\x00'}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = syz_open_dev$loop(&(0x7f0000000180), 0xff, 0x2040) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f00000001c0)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x13}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0xa, 0x4}, 0xc) 15:46:44 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) 15:46:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000000c0)={0x0, 0x10000}) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r1}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:44 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan1\x00'}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = syz_open_dev$loop(&(0x7f0000000180), 0xff, 0x2040) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f00000001c0)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x13}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0xa, 0x4}, 0xc) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan1\x00'}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) getsockopt$inet6_dccp_int(r1, 0x21, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) syz_open_dev$loop(&(0x7f0000000180), 0xff, 0x2040) (async) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x13}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0xa, 0x4}, 0xc) (async) 15:46:44 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 15:46:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x101000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000240)="25bcb5893cb47d7efb7be8950228d88f066b", 0x12}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000200)=',', 0xe, 0x0}) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f00000000c0)=""/84) 15:46:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000000c0)={0x0, 0x10000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r1}) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:44 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x8c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40400c0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) 15:46:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000140)={0x4, 0x6}) (async) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000140)={0x4, 0x6}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000240)={0x8001, 0x400, 0x7, 0x1, 0x1c, 0x8}) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000000c0)={0x6e, &(0x7f0000000000)="3e5410150c02bbd1ac9ba9bd6672fddc4c855d054b7da1f0fc88b46fe3a4f2bc0d2b14f46a5335afb35b2c88a98fddf13eec4247c4e167122a78075d656f9528e640f610e6ba23b5aeba58658c693e202ce6887975baeb4b17fac281c44470d39e007d9530224f63d13cb67cfb65"}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x7fff, 0x5, 0x5, 0x5c30e969, 0x3, [0x5, 0x7, 0x273e723a, 0x80000001], [0x8, 0x2af6512d, 0xd62, 0x6742], [0x0, 0x2, 0x2, 0x1], [0x3, 0x9692, 0x7, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) 15:46:44 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan1\x00'}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) getsockopt$inet6_dccp_int(r1, 0x21, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = syz_open_dev$loop(&(0x7f0000000180), 0xff, 0x2040) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x13}) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0xa, 0x4}, 0xc) 15:46:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x2, {0x20, 0x4, "9ef7c489e6fd89730ac9fdc040b5890dc2742be7fe334b114ffd9fd4f9f50180cd8202a3a34423861e81b5db740f437a1a42a854a5584d19413d2274a6420f7dcfea23a22d3c8f8495a54befda198dbd95dec8bc85c3e9c1d3446a776a2d3821be56b10fac5170ee246b463d59f86083f585b6fa569824215b93746eecf5e56e2f64a297c1a75a7b64b9a5bd40bbe84ddbdd2b89e5d79aefa88a45c6f136b1fe6e1b83de5a2338dc22246c087b9f1b6f2d22e89b161d9eae487ca75afade9b11f71b0798f2ccba191dc67c767d5653b2249253e5955846592c7ffdc23a6ee8279ca1339990d4a99e002501152617ed62000bcf5a3e24ff440dfe53cf39f78b01", 0x26, 0x7, 0x5, 0x5, 0x6, 0x3, 0x1f}}}, 0x128) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r2}) 15:46:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x4000000) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) r4 = socket(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20fa52cffd9ee07c}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="28f459f9", @ANYRES16=r3, @ANYBLOB="00012bbd7000fcdbdf258100000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x828}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000125bd7000fcdbdf25760000000c0058002a000000000000000c0058004c000000000000000c00580065000000000000000c0058002d000000000000000c0058001e000000000000000c0058001a0000000000000047"], 0x5c}}, 0x23a2e1a66a06ba7b) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f00000000c0)={0x3, 0x9}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8906, 0x0) 15:46:44 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x8c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40400c0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) 15:46:44 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x200000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1f, 0x22000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x8a9, 0x8, 0x0, 0x8, 0x8000, 0x80000001], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000140)=0x7fffffff) 15:46:44 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x3, 0x5, 0xff], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000001c0)={0x0, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x16000) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x11}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, &(0x7f00000000c0)={0x1, 0x7}) 15:46:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x80080) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000040)={r1, &(0x7f00000001c0)=""/4096}) 15:46:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x4000000) (async, rerun: 32) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) r4 = socket(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24000000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20fa52cffd9ee07c}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="28f459f9", @ANYRES16=r3, @ANYBLOB="00012bbd7000fcdbdf258100000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x828}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000125bd7000fcdbdf25760000000c0058002a000000000000000c0058004c000000000000000c00580065000000000000000c0058002d000000000000000c0058001e000000000000000c0058001a0000000000000047"], 0x5c}}, 0x23a2e1a66a06ba7b) (async) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f00000000c0)={0x3, 0x9}) (async, rerun: 64) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8906, 0x0) 15:46:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x2, {0x20, 0x4, "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", 0x26, 0x7, 0x5, 0x5, 0x6, 0x3, 0x1f}}}, 0x128) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r2}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x2, {0x20, 0x4, "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", 0x26, 0x7, 0x5, 0x5, 0x6, 0x3, 0x1f}}}, 0x128) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r2}) (async) 15:46:44 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x200000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1f, 0x22000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x8a9, 0x8, 0x0, 0x8, 0x8000, 0x80000001], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000140)=0x7fffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x200000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1f, 0x22000) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x8a9, 0x8, 0x0, 0x8, 0x8000, 0x80000001], 0x6}) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000140)=0x7fffffff) (async) 15:46:44 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x3, 0x5, 0xff], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000001c0)={0x0, 0x2}) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x16000) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x11}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, &(0x7f00000000c0)={0x1, 0x7}) 15:46:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x80080) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000040)={r1, &(0x7f00000001c0)=""/4096}) 15:46:44 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x8c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40400c0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) 15:46:44 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x2, {0x20, 0x4, "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", 0x26, 0x7, 0x5, 0x5, 0x6, 0x3, 0x1f}}}, 0x128) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r2}) 15:46:44 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x200000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1f, 0x22000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x8a9, 0x8, 0x0, 0x8, 0x8000, 0x80000001], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000140)=0x7fffffff) 15:46:44 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x3, 0x5, 0xff], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000001c0)={0x0, 0x2}) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x16000) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x11}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, &(0x7f00000000c0)={0x1, 0x7}) 15:46:44 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100)={0x1, 0x36}, 0x2) 15:46:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x80080) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000040)={r1, &(0x7f00000001c0)=""/4096}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x80080) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000040)={r1, &(0x7f00000001c0)=""/4096}) (async) 15:46:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000000c0)=[0x3, 0x1], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000004c0)={0x7, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000008c0)={&(0x7f0000ffb000/0x5000)=nil}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000380)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000a00)={&(0x7f0000000980)="cfdc0b41388ba3731e595eb0974ad2118fb6251aae7de7f997b6990ec5be9dccb51540dc5e3d75c1412d636679d2a4f6734d8473a17aaa91281dc18013ee5e04ad34462d4f5e5566a66baeea18573b2a", 0x50, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000a40)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000002c0)) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000800), 0x161383, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000880)={0x2}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000a80)={0x0, 0x1, 0x0, &(0x7f0000000700)=[{}], 0x0, 0x0, &(0x7f0000000580), 0xc, 0x0, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x3e, 0x1000, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r7, 0xc008af12, 0x0) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r8, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r8, 0xc06864b8, &(0x7f0000000900)={0x8a90, 0x403, 0x402, 0x8000, 0x2, [0x6, 0x9d5, 0x7, 0x6], [0xe4, 0xe00000, 0x80000000, 0x1f], [0x42, 0x1, 0x20], [0x8, 0x2, 0x8000, 0x6fd4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000400)={0x4000007, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000440)={r10, 0xffff}) ioctl$DRM_IOCTL_MARK_BUFS(r9, 0x40206417, &(0x7f0000000340)={0xfffffffa, 0x0, 0x7, 0x1b5a, 0x14, 0x8000000000000001}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000100)={0x13}) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f0000000480)={0x800, 0xa5, 0x6, 0xfffffe01, 0x4, 0x7}) ioctl$DRM_IOCTL_GET_MAP(r9, 0xc0286404, &(0x7f00000003c0)={&(0x7f0000ffd000/0x2000)=nil}) 15:46:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) (async) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x4000000) (async) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) (async) r4 = socket(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20fa52cffd9ee07c}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="28f459f9", @ANYRES16=r3, @ANYBLOB="00012bbd7000fcdbdf258100000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x828}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000125bd7000fcdbdf25760000000c0058002a000000000000000c0058004c000000000000000c00580065000000000000000c0058002d000000000000000c0058001e000000000000000c0058001a0000000000000047"], 0x5c}}, 0x23a2e1a66a06ba7b) (async) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f00000000c0)={0x3, 0x9}) (async) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8906, 0x0) 15:46:44 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000000c0)) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x1ff], 0x1, 0x0, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:44 executing program 2: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x100, 0x8, 0x947510ad, 0x6, 0x1, [0x10000, 0x80000000, 0x9, 0x7fffffff], [0x1, 0x3, 0x2, 0x8001], [0x4, 0x3, 0x21ac24d9, 0x1], [0x0, 0x1, 0x5, 0xa]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 15:46:44 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) (rerun: 32) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100)={0x1, 0x36}, 0x2) 15:46:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1000, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000240)={0x64, &(0x7f00000001c0)="fbb9fe415d5fd8f0b9c4e379e64bce30e512acb8a2514c5bc3acd27a807c0a2525a7f9910cd2b3d896c5780b6fe588a127b6dba35b40dc04f495ea920767c660b7e9c189c4f8cb0c315a023de55fe7bc8537a28f24a862705debb9a6511c14730f00f153"}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x218000, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f00000002c0)={0x1, r4}) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000140)={0x0, 0x7f}, 0x2) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000040)) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x202, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000000)) 15:46:44 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000000c0)) (async) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x1ff], 0x1, 0x0, 0x0, 0xffffffffffffffff}) (async) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) (async) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:44 executing program 2: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x100, 0x8, 0x947510ad, 0x6, 0x1, [0x10000, 0x80000000, 0x9, 0x7fffffff], [0x1, 0x3, 0x2, 0x8001], [0x4, 0x3, 0x21ac24d9, 0x1], [0x0, 0x1, 0x5, 0xa]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x100, 0x8, 0x947510ad, 0x6, 0x1, [0x10000, 0x80000000, 0x9, 0x7fffffff], [0x1, 0x3, 0x2, 0x8001], [0x4, 0x3, 0x21ac24d9, 0x1], [0x0, 0x1, 0x5, 0xa]}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) (async) 15:46:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000000c0)=[0x3, 0x1], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000004c0)={0x7, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000008c0)={&(0x7f0000ffb000/0x5000)=nil}) (async, rerun: 64) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000380)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000a00)={&(0x7f0000000980)="cfdc0b41388ba3731e595eb0974ad2118fb6251aae7de7f997b6990ec5be9dccb51540dc5e3d75c1412d636679d2a4f6734d8473a17aaa91281dc18013ee5e04ad34462d4f5e5566a66baeea18573b2a", 0x50, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000a40)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000002c0)) (async, rerun: 32) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000800), 0x161383, 0x0) (rerun: 32) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000880)={0x2}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000a80)={0x0, 0x1, 0x0, &(0x7f0000000700)=[{}], 0x0, 0x0, &(0x7f0000000580), 0xc, 0x0, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x3e, 0x1000, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r2}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r7, 0xc008af12, 0x0) (async) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r8, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r8, 0xc06864b8, &(0x7f0000000900)={0x8a90, 0x403, 0x402, 0x8000, 0x2, [0x6, 0x9d5, 0x7, 0x6], [0xe4, 0xe00000, 0x80000000, 0x1f], [0x42, 0x1, 0x20], [0x8, 0x2, 0x8000, 0x6fd4]}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000400)={0x4000007, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000440)={r10, 0xffff}) (async) ioctl$DRM_IOCTL_MARK_BUFS(r9, 0x40206417, &(0x7f0000000340)={0xfffffffa, 0x0, 0x7, 0x1b5a, 0x14, 0x8000000000000001}) (async, rerun: 32) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000100)={0x13}) (async, rerun: 32) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f0000000480)={0x800, 0xa5, 0x6, 0xfffffe01, 0x4, 0x7}) (async, rerun: 64) ioctl$DRM_IOCTL_GET_MAP(r9, 0xc0286404, &(0x7f00000003c0)={&(0x7f0000ffd000/0x2000)=nil}) (rerun: 64) 15:46:44 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x404700, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8906, 0x0) 15:46:44 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100)={0x1, 0x36}, 0x2) 15:46:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1000, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000240)={0x64, &(0x7f00000001c0)="fbb9fe415d5fd8f0b9c4e379e64bce30e512acb8a2514c5bc3acd27a807c0a2525a7f9910cd2b3d896c5780b6fe588a127b6dba35b40dc04f495ea920767c660b7e9c189c4f8cb0c315a023de55fe7bc8537a28f24a862705debb9a6511c14730f00f153"}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x218000, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f00000002c0)={0x1, r4}) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000140)={0x0, 0x7f}, 0x2) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000040)) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x202, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000180), 0x1000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000240)={0x64, &(0x7f00000001c0)="fbb9fe415d5fd8f0b9c4e379e64bce30e512acb8a2514c5bc3acd27a807c0a2525a7f9910cd2b3d896c5780b6fe588a127b6dba35b40dc04f495ea920767c660b7e9c189c4f8cb0c315a023de55fe7bc8537a28f24a862705debb9a6511c14730f00f153"}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$RTC_VL_CLR(r2, 0x7014) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x218000, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) (async) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f00000002c0)={0x1, r4}) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000140)={0x0, 0x7f}, 0x2) (async) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000040)) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x202, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000000)) (async) 15:46:44 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000000c0)) (async) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x1ff], 0x1, 0x0, 0x0, 0xffffffffffffffff}) (async) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) (async) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) (async) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:44 executing program 2: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x100, 0x8, 0x947510ad, 0x6, 0x1, [0x10000, 0x80000000, 0x9, 0x7fffffff], [0x1, 0x3, 0x2, 0x8001], [0x4, 0x3, 0x21ac24d9, 0x1], [0x0, 0x1, 0x5, 0xa]}) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 15:46:44 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x404700, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8906, 0x0) 15:46:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000000c0)=[0x3, 0x1], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000004c0)={0x7, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000008c0)={&(0x7f0000ffb000/0x5000)=nil}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000380)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000a00)={&(0x7f0000000980)="cfdc0b41388ba3731e595eb0974ad2118fb6251aae7de7f997b6990ec5be9dccb51540dc5e3d75c1412d636679d2a4f6734d8473a17aaa91281dc18013ee5e04ad34462d4f5e5566a66baeea18573b2a", 0x50, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000a40)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000002c0)) (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000800), 0x161383, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000880)={0x2}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000a80)={0x0, 0x1, 0x0, &(0x7f0000000700)=[{}], 0x0, 0x0, &(0x7f0000000580), 0xc, 0x0, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x3e, 0x1000, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r2}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) (async) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r7, 0xc008af12, 0x0) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r8, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r8, 0xc06864b8, &(0x7f0000000900)={0x8a90, 0x403, 0x402, 0x8000, 0x2, [0x6, 0x9d5, 0x7, 0x6], [0xe4, 0xe00000, 0x80000000, 0x1f], [0x42, 0x1, 0x20], [0x8, 0x2, 0x8000, 0x6fd4]}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000400)={0x4000007, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000440)={r10, 0xffff}) (async) ioctl$DRM_IOCTL_MARK_BUFS(r9, 0x40206417, &(0x7f0000000340)={0xfffffffa, 0x0, 0x7, 0x1b5a, 0x14, 0x8000000000000001}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000100)={0x13}) (async) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f0000000480)={0x800, 0xa5, 0x6, 0xfffffe01, 0x4, 0x7}) ioctl$DRM_IOCTL_GET_MAP(r9, 0xc0286404, &(0x7f00000003c0)={&(0x7f0000ffd000/0x2000)=nil}) 15:46:44 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xfff, 0x7f, 0x10001, 0x0, 0x9, 0x9, 0x5, 0x1, 0xac06, 0x6], 0xa}) 15:46:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1000, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000240)={0x64, &(0x7f00000001c0)="fbb9fe415d5fd8f0b9c4e379e64bce30e512acb8a2514c5bc3acd27a807c0a2525a7f9910cd2b3d896c5780b6fe588a127b6dba35b40dc04f495ea920767c660b7e9c189c4f8cb0c315a023de55fe7bc8537a28f24a862705debb9a6511c14730f00f153"}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x218000, 0x0) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f00000002c0)={0x1, r4}) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000140)={0x0, 0x7f}, 0x2) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000040)) (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x202, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000000)) 15:46:44 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 15:46:44 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 64) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x404700, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8906, 0x0) 15:46:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x4802) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000100)={0x2, r3}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r4, 0x8008af73, 0x0) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000040)=0x6) 15:46:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) 15:46:44 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xfff, 0x7f, 0x10001, 0x0, 0x9, 0x9, 0x5, 0x1, 0xac06, 0x6], 0xa}) 15:46:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000440)='U', 0x1}) r1 = socket(0x23, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x89e0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000001540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r2, @ANYBLOB="000128bd7000fddbdf2565000000200103800c000080080003005209000004010080fe0001008f50e2fd563b6eb522e0b03e76ea922f5014c976a9a64b1b5e0030af005873f1b27e041939315afb82660d1c077235a337389a843be53de00907c9b8042e2cdfdc1bf135626f71a6442c7ccd212f46cddc62f109f03f646f65874f9ba60bf1ee67b0545a55291c6b1ac1e1d98f67c022b8634cf329e411beff1b00fd1c9bc5771b37fc0fcc9dae72e63bf55619f9cc2f23407b1745bc8dddd4a9ddc7ad576b36ad242f7ff300824d1b412b607eba22a722b8002f2632d0fcba866e2fd6290e4f681f2e83dfd6f6c743b67607f21dd101cccf4bb1826fa8963360c20a4af3a02d06e937d40b1cbcaedef40010f2f37e892757989ec266d7b08bb300000c00008008000300000000801d003a208168c51cfa5c0332100003800c00008008000300ffffffff08000200000000000800010000080000080001000300000004000380e0000380800000807b0002000f3d3e778cccbcb14562706cbd8eb327ea83272c8b2f7fac861a0ba0295e6754fce451bf4be115855eca297fd0c6588c06a1c25df23186c0fc9db39f7533b4f415df91b08639941ced8c49ae41a6a1d8db0c787a8f65ef0a99b87fbcf8564c9ee532bf7faca5789f23397defed9f63bb36c517332e490e005c0000805800010063c3ef762248e2709a3aca7f17a39fe38e3f7f651e2e65e4e58e309aebfce84da88e796cf6b24aa5135d6812fe7defbd6e0093e2708158363655b2aa8e673bf07d18f8f2a805e1e4fb67d20e8e4caec32f305ff7080002000000000008000200ffffffff"], 0x250}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000000)=""/44) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x44040, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000480)) 15:46:44 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 15:46:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) (async) 15:46:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x4802) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000100)={0x2, r3}) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r4, 0x8008af73, 0x0) (async, rerun: 64) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) (rerun: 64) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000040)=0x6) 15:46:44 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xfff, 0x7f, 0x10001, 0x0, 0x9, 0x9, 0x5, 0x1, 0xac06, 0x6], 0xa}) 15:46:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000440)='U', 0x1}) (async) r1 = socket(0x23, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x89e0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000001540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r2, @ANYBLOB="000128bd7000fddbdf2565000000200103800c000080080003005209000004010080fe0001008f50e2fd563b6eb522e0b03e76ea922f5014c976a9a64b1b5e0030af005873f1b27e041939315afb82660d1c077235a337389a843be53de00907c9b8042e2cdfdc1bf135626f71a6442c7ccd212f46cddc62f109f03f646f65874f9ba60bf1ee67b0545a55291c6b1ac1e1d98f67c022b8634cf329e411beff1b00fd1c9bc5771b37fc0fcc9dae72e63bf55619f9cc2f23407b1745bc8dddd4a9ddc7ad576b36ad242f7ff300824d1b412b607eba22a722b8002f2632d0fcba866e2fd6290e4f681f2e83dfd6f6c743b67607f21dd101cccf4bb1826fa8963360c20a4af3a02d06e937d40b1cbcaedef40010f2f37e892757989ec266d7b08bb300000c00008008000300000000801d003a208168c51cfa5c0332100003800c00008008000300ffffffff08000200000000000800010000080000080001000300000004000380e0000380800000807b0002000f3d3e778cccbcb14562706cbd8eb327ea83272c8b2f7fac861a0ba0295e6754fce451bf4be115855eca297fd0c6588c06a1c25df23186c0fc9db39f7533b4f415df91b08639941ced8c49ae41a6a1d8db0c787a8f65ef0a99b87fbcf8564c9ee532bf7faca5789f23397defed9f63bb36c517332e490e005c0000805800010063c3ef762248e2709a3aca7f17a39fe38e3f7f651e2e65e4e58e309aebfce84da88e796cf6b24aa5135d6812fe7defbd6e0093e2708158363655b2aa8e673bf07d18f8f2a805e1e4fb67d20e8e4caec32f305ff7080002000000000008000200ffffffff"], 0x250}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000000)=""/44) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x44040, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000480)) 15:46:44 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 15:46:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) 15:46:45 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x4802) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000100)={0x2, r3}) (async, rerun: 32) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r4, 0x8008af73, 0x0) (async) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) (async) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000040)=0x6) 15:46:45 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f0000000040)={0x2, 0x2e}) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @random="7740a8408aa5", 'bridge_slave_1\x00'}}) 15:46:45 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8, 0x9], 0x2, 0xc0000, 0x0, 0xffffffffffffffff}) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000100)=0x8) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x40000) socket(0x21, 0xa, 0x6) 15:46:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000140)={r5, 0x3}) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000240)={0xcb, 0x800, 0x6, 0x5, 0x1c, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r4}) 15:46:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000440)='U', 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000440)='U', 0x1}) r1 = socket(0x23, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x89e0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000001540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r2, @ANYBLOB="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"], 0x250}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000000)=""/44) (async) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000000)=""/44) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x44040, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000480)) 15:46:45 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) (async) 15:46:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000100)={&(0x7f0000001380), &(0x7f00000013c0)=[{}, {}, {}, {}], 0x41fa, 0x0, '\x00', 0x0, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x401, 0x0, 0x1}) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000200)={0x2, 0x7}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000080)={0x0, r3}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000240)={0x2, 0x7, 0xace, 0x74, &(0x7f00000002c0)=""/116, 0x40, &(0x7f0000000140)=""/64, 0x1000, &(0x7f0000000340)=""/4096}) 15:46:45 executing program 5: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f0000000040)={0x2, 0x2e}) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @random="7740a8408aa5", 'bridge_slave_1\x00'}}) (async) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @random="7740a8408aa5", 'bridge_slave_1\x00'}}) 15:46:45 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8, 0x9], 0x2, 0xc0000, 0x0, 0xffffffffffffffff}) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000100)=0x8) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x40000) (async) syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x40000) socket(0x21, 0xa, 0x6) 15:46:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x10000) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) 15:46:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000140)={r5, 0x3}) (async) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000240)={0xcb, 0x800, 0x6, 0x5, 0x1c, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r4}) 15:46:45 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) (async) 15:46:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000100)={&(0x7f0000001380), &(0x7f00000013c0)=[{}, {}, {}, {}], 0x41fa, 0x0, '\x00', 0x0, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x401, 0x0, 0x1}) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000200)={0x2, 0x7}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000080)={0x0, r3}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000240)={0x2, 0x7, 0xace, 0x74, &(0x7f00000002c0)=""/116, 0x40, &(0x7f0000000140)=""/64, 0x1000, &(0x7f0000000340)=""/4096}) (async) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000240)={0x2, 0x7, 0xace, 0x74, &(0x7f00000002c0)=""/116, 0x40, &(0x7f0000000140)=""/64, 0x1000, &(0x7f0000000340)=""/4096}) 15:46:45 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8, 0x9], 0x2, 0xc0000, 0x0, 0xffffffffffffffff}) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000100)=0x8) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x40000) socket(0x21, 0xa, 0x6) 15:46:45 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x2) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) (async, rerun: 64) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f0000000040)={0x2, 0x2e}) (rerun: 64) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @random="7740a8408aa5", 'bridge_slave_1\x00'}}) 15:46:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x10000) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) 15:46:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000100)={&(0x7f0000001380), &(0x7f00000013c0)=[{}, {}, {}, {}], 0x41fa, 0x0, '\x00', 0x0, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x401, 0x0, 0x1}) (async) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000200)={0x2, 0x7}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000080)={0x0, r3}) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) (rerun: 32) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000240)={0x2, 0x7, 0xace, 0x74, &(0x7f00000002c0)=""/116, 0x40, &(0x7f0000000140)=""/64, 0x1000, &(0x7f0000000340)=""/4096}) 15:46:45 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 15:46:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000140)={r5, 0x3}) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000240)={0xcb, 0x800, 0x6, 0x5, 0x1c, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r4}) 15:46:45 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 15:46:45 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48041, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) 15:46:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x10000) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x10000) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (async) 15:46:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x688e, 0x80000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:45 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 15:46:45 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48041, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48041, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) (async) 15:46:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x2, 0x1, &(0x7f00000000c0)=""/108, &(0x7f0000000040)=""/56, &(0x7f0000000140)=""/34, 0x1000}) 15:46:45 executing program 3: ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000140)={0x0, 0x95, ""/149}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) 15:46:45 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 15:46:45 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 15:46:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x2, 0x1, &(0x7f00000000c0)=""/108, &(0x7f0000000040)=""/56, &(0x7f0000000140)=""/34, 0x1000}) 15:46:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x688e, 0x80000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:45 executing program 3: ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000140)={0x0, 0x95, ""/149}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (rerun: 32) 15:46:45 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48041, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) 15:46:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x2, 0x1, &(0x7f00000000c0)=""/108, &(0x7f0000000040)=""/56, &(0x7f0000000140)=""/34, 0x1000}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x2, 0x1, &(0x7f00000000c0)=""/108, &(0x7f0000000040)=""/56, &(0x7f0000000140)=""/34, 0x1000}) (async) 15:46:45 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) (async) 15:46:45 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xffffffffffffff71, 0x0}, 0x4c090) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000428bd70000000c8100900000008000300", @ANYRES32=0x0, @ANYBLOB="05000a0065000000"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x52}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40180}, 0x24068010) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x1f, 0x6, 0xa0f, 0x8001], 0x4, 0x0, 0x0, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r8, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000340)={0x7f, 0x6, 0x9, 0xe0e0e0e0}) 15:46:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x688e, 0x80000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:45 executing program 3: ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000140)={0x0, 0x95, ""/149}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) 15:46:45 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x4}, 0xfffffffffffffeb4) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x3f}, 0x2) 15:46:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000000)={0x0, 0x2}) 15:46:45 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x4}, 0xfffffffffffffeb4) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x3f}, 0x2) 15:46:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x3}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000040)={0xdd, &(0x7f0000000200)="d46b3f22fc64e2db759e29acd445f6240b91db8e41e70dec718485e2ee13abca7ecbf215ba3f98466070a19a2a8b923736b071f65f19f85d8b363ffc94d892903c5bb7f7f18c132ec39b7ff7dfe0acb762de6d3bbfa4f1c9bb84d5ce34428b06b1daad07ba2ea5d1e2297eeb8409336e7ed43f6eb3d3f81d894a0ed1f59e1a014368cc2dbf4d571f25ab127d18e6813a330607951673e66c9f502537c6adfbdbcf57ce2803c73a4e4d4096e8e8956a2ef13d0d3b4c44c455b3eafdfb5103b2310fb17b357edf6be8a9d9778828159de985e144da00c820c642a846cb7d"}) 15:46:45 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xffffffffffffff71, 0x0}, 0x4c090) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000428bd70000000c8100900000008000300", @ANYRES32=0x0, @ANYBLOB="05000a0065000000"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x52}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40180}, 0x24068010) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x1f, 0x6, 0xa0f, 0x8001], 0x4, 0x0, 0x0, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r8, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000340)={0x7f, 0x6, 0x9, 0xe0e0e0e0}) 15:46:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000000)={0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (async) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000000)={0x0, 0x2}) (async) 15:46:45 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x4}, 0xfffffffffffffeb4) (async) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x3f}, 0x2) 15:46:45 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan1\x00'}) 15:46:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:45 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xffffffffffffff71, 0x0}, 0x4c090) (async) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000428bd70000000c8100900000008000300", @ANYRES32=0x0, @ANYBLOB="05000a0065000000"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x52}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40180}, 0x24068010) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x1f, 0x6, 0xa0f, 0x8001], 0x4, 0x0, 0x0, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r8, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000340)={0x7f, 0x6, 0x9, 0xe0e0e0e0}) 15:46:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (async) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000000)={0x0, 0x2}) 15:46:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000040)={0xdd, &(0x7f0000000200)="d46b3f22fc64e2db759e29acd445f6240b91db8e41e70dec718485e2ee13abca7ecbf215ba3f98466070a19a2a8b923736b071f65f19f85d8b363ffc94d892903c5bb7f7f18c132ec39b7ff7dfe0acb762de6d3bbfa4f1c9bb84d5ce34428b06b1daad07ba2ea5d1e2297eeb8409336e7ed43f6eb3d3f81d894a0ed1f59e1a014368cc2dbf4d571f25ab127d18e6813a330607951673e66c9f502537c6adfbdbcf57ce2803c73a4e4d4096e8e8956a2ef13d0d3b4c44c455b3eafdfb5103b2310fb17b357edf6be8a9d9778828159de985e144da00c820c642a846cb7d"}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000040)={0xdd, &(0x7f0000000200)="d46b3f22fc64e2db759e29acd445f6240b91db8e41e70dec718485e2ee13abca7ecbf215ba3f98466070a19a2a8b923736b071f65f19f85d8b363ffc94d892903c5bb7f7f18c132ec39b7ff7dfe0acb762de6d3bbfa4f1c9bb84d5ce34428b06b1daad07ba2ea5d1e2297eeb8409336e7ed43f6eb3d3f81d894a0ed1f59e1a014368cc2dbf4d571f25ab127d18e6813a330607951673e66c9f502537c6adfbdbcf57ce2803c73a4e4d4096e8e8956a2ef13d0d3b4c44c455b3eafdfb5103b2310fb17b357edf6be8a9d9778828159de985e144da00c820c642a846cb7d"}) (async) 15:46:45 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan1\x00'}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan1\x00'}) (async) 15:46:45 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000000)) 15:46:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:45 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x8, 0x3ff, 0x4], 0x3, 0x80800}) 15:46:45 executing program 3: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000001c0)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x5, 0x3, 0x3f, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000140)={r1, &(0x7f00000000c0)=""/55}) 15:46:45 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan1\x00'}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan1\x00'}) (async) 15:46:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000040)={0xdd, &(0x7f0000000200)="d46b3f22fc64e2db759e29acd445f6240b91db8e41e70dec718485e2ee13abca7ecbf215ba3f98466070a19a2a8b923736b071f65f19f85d8b363ffc94d892903c5bb7f7f18c132ec39b7ff7dfe0acb762de6d3bbfa4f1c9bb84d5ce34428b06b1daad07ba2ea5d1e2297eeb8409336e7ed43f6eb3d3f81d894a0ed1f59e1a014368cc2dbf4d571f25ab127d18e6813a330607951673e66c9f502537c6adfbdbcf57ce2803c73a4e4d4096e8e8956a2ef13d0d3b4c44c455b3eafdfb5103b2310fb17b357edf6be8a9d9778828159de985e144da00c820c642a846cb7d"}) 15:46:45 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000000)) 15:46:45 executing program 3: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000001c0)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x5, 0x3, 0x3f, 0xc0c0c0c0}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000140)={r1, &(0x7f00000000c0)=""/55}) 15:46:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x14}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000001c0)={0xc8, &(0x7f0000000080)="1cb3432f67d6e0b03b86d5b40df9538471b3407bceb1ba59207fd2df0321423e8df5ccb98d33ec0f3a7f48605c164d426b9bbc5c96144056564d4823a621aff49e4f484b2db9d6bd164d0854efc111e3091a89e064b4711e78a0bcedbb253955f7d5e76fdbcb63c8cf68fab42f714a15546e81136f89281a04890d7d5f51bb0a96ba58747497e71a905007d8bc27752a5554d76b8ca11fcba27dff78ed0a6521576f8f583d43f31bd9feec88ae745f2c937bdbcff1b54c8c66cc81b057096ceb0deba4bace946fa9"}) 15:46:45 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x8, 0x3ff, 0x4], 0x3, 0x80800}) 15:46:45 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) 15:46:45 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000000)) 15:46:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x14}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000001c0)={0xc8, &(0x7f0000000080)="1cb3432f67d6e0b03b86d5b40df9538471b3407bceb1ba59207fd2df0321423e8df5ccb98d33ec0f3a7f48605c164d426b9bbc5c96144056564d4823a621aff49e4f484b2db9d6bd164d0854efc111e3091a89e064b4711e78a0bcedbb253955f7d5e76fdbcb63c8cf68fab42f714a15546e81136f89281a04890d7d5f51bb0a96ba58747497e71a905007d8bc27752a5554d76b8ca11fcba27dff78ed0a6521576f8f583d43f31bd9feec88ae745f2c937bdbcff1b54c8c66cc81b057096ceb0deba4bace946fa9"}) 15:46:46 executing program 3: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000001c0)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x5, 0x3, 0x3f, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000140)={r1, &(0x7f00000000c0)=""/55}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000001c0)) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x5, 0x3, 0x3f, 0xc0c0c0c0}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000140)={r1, &(0x7f00000000c0)=""/55}) (async) 15:46:46 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000000)=0x6) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x8, 0x3ff, 0x4], 0x3, 0x80800}) 15:46:46 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) 15:46:46 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x36}, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000100)={0x67446698, 0x0, 0x2, 0x4, 0x3, "dd5b86c28fa2e811a04bfba3c36fd74f0fc47f4ebea130235a8c5c00f96f9155b9f5c3df2d3ae1a4f14bea3e1e7de7f7cf3076a522f00e3cdbc2b58004d879e1d4f7b5982122105226168f98f421040c8ed7e43db12516f25c53dd3c2024f258e79eb93f3920f5703c583607e2d704e52a559c21b3cd77e4620b065f60326815de0d5a5dc1de59d53fa09413876625810db511c4"}, 0xa4) 15:46:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) 15:46:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x14}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000001c0)={0xc8, &(0x7f0000000080)="1cb3432f67d6e0b03b86d5b40df9538471b3407bceb1ba59207fd2df0321423e8df5ccb98d33ec0f3a7f48605c164d426b9bbc5c96144056564d4823a621aff49e4f484b2db9d6bd164d0854efc111e3091a89e064b4711e78a0bcedbb253955f7d5e76fdbcb63c8cf68fab42f714a15546e81136f89281a04890d7d5f51bb0a96ba58747497e71a905007d8bc27752a5554d76b8ca11fcba27dff78ed0a6521576f8f583d43f31bd9feec88ae745f2c937bdbcff1b54c8c66cc81b057096ceb0deba4bace946fa9"}) 15:46:46 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000000c0)={r1, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000000)=0x7) 15:46:46 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xff, 0x9b, 0x400, 0xa70189a, 0x3], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000140)={0x9, 0x1, 0x8001, 0x100}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000000)={0x0, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8906, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000080)={r3}) 15:46:46 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x36}, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000100)={0x67446698, 0x0, 0x2, 0x4, 0x3, "dd5b86c28fa2e811a04bfba3c36fd74f0fc47f4ebea130235a8c5c00f96f9155b9f5c3df2d3ae1a4f14bea3e1e7de7f7cf3076a522f00e3cdbc2b58004d879e1d4f7b5982122105226168f98f421040c8ed7e43db12516f25c53dd3c2024f258e79eb93f3920f5703c583607e2d704e52a559c21b3cd77e4620b065f60326815de0d5a5dc1de59d53fa09413876625810db511c4"}, 0xa4) 15:46:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) 15:46:46 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000040), &(0x7f0000000080)=[{}, {}, {}, {}], 0x23, 0x0, '\x00', 0x0, 0x4}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:46 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x10001}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000000c0)={r1, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000000)=0x7) 15:46:46 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xff, 0x9b, 0x400, 0xa70189a, 0x3], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000140)={0x9, 0x1, 0x8001, 0x100}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000000)={0x0, 0x2}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8906, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000080)={r3}) 15:46:46 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x36}, 0x2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000100)={0x67446698, 0x0, 0x2, 0x4, 0x3, "dd5b86c28fa2e811a04bfba3c36fd74f0fc47f4ebea130235a8c5c00f96f9155b9f5c3df2d3ae1a4f14bea3e1e7de7f7cf3076a522f00e3cdbc2b58004d879e1d4f7b5982122105226168f98f421040c8ed7e43db12516f25c53dd3c2024f258e79eb93f3920f5703c583607e2d704e52a559c21b3cd77e4620b065f60326815de0d5a5dc1de59d53fa09413876625810db511c4"}, 0xa4) 15:46:46 executing program 4: write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x4, {0x2, 0x6, "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", 0xff, 0x80, 0x1, 0x3f, 0x8, 0x8, 0x8}}}, 0x128) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:46 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x10001}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000000c0)={r1, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000000)=0x7) 15:46:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)={r1}) 15:46:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000040), &(0x7f0000000080)=[{}, {}, {}, {}], 0x23, 0x0, '\x00', 0x0, 0x4}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:46 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xff, 0x9b, 0x400, 0xa70189a, 0x3], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000140)={0x9, 0x1, 0x8001, 0x100}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000000)={0x0, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8906, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xff, 0x9b, 0x400, 0xa70189a, 0x3], 0x5, 0x80800}) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000140)={0x9, 0x1, 0x8001, 0x100}) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000000)={0x0, 0x2}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8906, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000080)={r3}) (async) 15:46:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000040), &(0x7f0000000080)=[{}, {}, {}, {}], 0x23, 0x0, '\x00', 0x0, 0x4}) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) (rerun: 32) 15:46:46 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x521000, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000040)) 15:46:46 executing program 4: write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x4, {0x2, 0x6, "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", 0xff, 0x80, 0x1, 0x3f, 0x8, 0x8, 0x8}}}, 0x128) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x4, {0x2, 0x6, "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", 0xff, 0x80, 0x1, 0x3f, 0x8, 0x8, 0x8}}}, 0x128) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) 15:46:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)={r1}) (async) 15:46:46 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r2}}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xfffd, 0x305c80) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x8}) 15:46:46 executing program 4: write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x4, {0x2, 0x6, "48dbfc4d135f85b1a257af89fdb006e6405dfb09906fc73ff0bb6ea2de0d1ffdef47dee7c633961e6c24361cfb5d00d098c97aaf27de498d727daae62bf9850d9062a8dcbf3cf4e636480620384f0dff0207a3164cd39771f11621219f822edd01721c085ba8ba85310ea9c22bd95fe2984dc86639623896b24ca703bbe686fa15940dc735e1419acafb87220bebba7d8e301fb5dd0878fcfd2d60690bbd85d36be8aff8ae2f5a03b980a5807044c7d6804d06e7676be703726a0adfabe7ac113405db9f98fb0f5a71513c447266caaf4c9a789f60d0d23282206d433de5eec202879c390b1df47e6f0a0001d5c8586a67220d10c084645de0e5a06241721b67", 0xff, 0x80, 0x1, 0x3f, 0x8, 0x8, 0x8}}}, 0x128) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:46 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x521000, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000040)) 15:46:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x10009, 0x81, 0x3, 0xffff, 0x4e, 0x1000000, 0x7, 0x8], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) 15:46:46 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r2}}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xfffd, 0x305c80) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x8}) 15:46:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x10009, 0x81, 0x3, 0xffff, 0x4e, 0x1000000, 0x7, 0x8], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) 15:46:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)={r1}) 15:46:46 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:46 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x521000, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000040)) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) (async) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x521000, 0x0) (async) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000040)) (async) 15:46:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xfffd, 0x305c80) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x8}) 15:46:46 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r2}}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r2}}, 0x48) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) (async) 15:46:46 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x10009, 0x81, 0x3, 0xffff, 0x4e, 0x1000000, 0x7, 0x8], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) 15:46:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="80", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) 15:46:46 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x1, 0xfffffffffffff4ed, 0xa}}) 15:46:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x81, 0x102) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x8, 0x8001, 0x7}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) 15:46:46 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000000)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000300)={0x1, 0x5}) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f00000001c0)=""/45) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x402000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000240)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000280)={r7, 0x80000}) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0)={0x1, 0x29}, 0x2) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r8, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e20, @broadcast}}}, 0x90) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000040)={0x0, 0xfb8a}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:46 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000040)={0x8, 0x80000000, 0x8, 0x1f}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="80", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x80000) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="80", 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) (async) 15:46:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x81, 0x102) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x8, 0x8001, 0x7}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x81, 0x102) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x8, 0x8001, 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) 15:46:46 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) (async) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x1, 0xfffffffffffff4ed, 0xa}}) 15:46:46 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000000)) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000300)={0x1, 0x5}) (async) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f00000001c0)=""/45) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x402000, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000240)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000280)={r7, 0x80000}) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0)={0x1, 0x29}, 0x2) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r8, 0xc008af12, 0x0) (async) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e20, @broadcast}}}, 0x90) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000040)={0x0, 0xfb8a}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:46 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000380)={0x0, 0x2, 0x0, &(0x7f0000000100)=[{}, {}], 0x2, 0x0, &(0x7f00000001c0)=[{}, {}], 0x1, 0x0, &(0x7f00000002c0)=[{}], 0x2, 0x0, &(0x7f0000000300)=[{}, {}]}) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000080)=""/1) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x606083, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000040)={0x8, 0x80000000, 0x8, 0x1f}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000040)={0x8, 0x80000000, 0x8, 0x1f}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) (async) 15:46:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="80", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) 15:46:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x81, 0x102) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x8, 0x8001, 0x7}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) 15:46:46 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000380)={0x0, 0x2, 0x0, &(0x7f0000000100)=[{}, {}], 0x2, 0x0, &(0x7f00000001c0)=[{}, {}], 0x1, 0x0, &(0x7f00000002c0)=[{}], 0x2, 0x0, &(0x7f0000000300)=[{}, {}]}) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000000c0)) (async) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000080)=""/1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x606083, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:46 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) (async) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x1, 0xfffffffffffff4ed, 0xa}}) 15:46:46 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 64) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async, rerun: 64) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000000)) (async, rerun: 64) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000300)={0x1, 0x5}) (async) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f00000001c0)=""/45) (async, rerun: 32) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async, rerun: 32) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x402000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000240)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000280)={r7, 0x80000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0)={0x1, 0x29}, 0x2) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r8, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e20, @broadcast}}}, 0x90) (async) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000040)={0x0, 0xfb8a}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:46 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r2}}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000040)={0x8, 0x80000000, 0x8, 0x1f}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x800, 0x105881) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000140)={r3}) 15:46:46 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48041, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) 15:46:46 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000380)={0x0, 0x2, 0x0, &(0x7f0000000100)=[{}, {}], 0x2, 0x0, &(0x7f00000001c0)=[{}, {}], 0x1, 0x0, &(0x7f00000002c0)=[{}], 0x2, 0x0, &(0x7f0000000300)=[{}, {}]}) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000080)=""/1) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x606083, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000380)={0x0, 0x2, 0x0, &(0x7f0000000100)=[{}, {}], 0x2, 0x0, &(0x7f00000001c0)=[{}, {}], 0x1, 0x0, &(0x7f00000002c0)=[{}], 0x2, 0x0, &(0x7f0000000300)=[{}, {}]}) (async) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000080)=""/1) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x606083, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) 15:46:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000040)={0x0, 0x4}) 15:46:46 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r2}}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x800, 0x105881) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000140)={r3}) 15:46:47 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48041, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) 15:46:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000140)={r5, 0x3}) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000240)={0xcb, 0x800, 0x6, 0x5, 0x1c, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r4}) 15:46:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000040)={0x0, 0x4}) 15:46:47 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0xd4250fefc1fe856b, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x1c}}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x7ff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x10}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @broadcast}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1f}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}]}, 0x58}}, 0x4040) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) 15:46:47 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8, 0x9], 0x2, 0xc0000, 0x0, 0xffffffffffffffff}) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000100)=0x8) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x40000) socket(0x21, 0xa, 0x6) 15:46:47 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f0000000200)={0x2, 0x5}) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:47 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48041, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x2) 15:46:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x800, 0x105881) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000140)={r3}) syz_open_dev$dri(&(0x7f0000000180), 0x800, 0x105881) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000140)={r3}) (async) 15:46:47 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0xd4250fefc1fe856b, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x1c}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x7ff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x10}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @broadcast}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1f}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}]}, 0x58}}, 0x4040) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) 15:46:47 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000040)={0x0, 0x4}) 15:46:47 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f0000000200)={0x2, 0x5}) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f0000000200)={0x2, 0x5}) (async) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) (async) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) (async) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) 15:46:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) 15:46:47 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan1\x00'}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = syz_open_dev$loop(&(0x7f0000000180), 0xff, 0x2040) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f00000001c0)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x13}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0xa, 0x4}, 0xc) 15:46:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r2}) 15:46:47 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0xd4250fefc1fe856b, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0xd4250fefc1fe856b, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x1c}}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x7ff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x10}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @broadcast}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1f}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}]}, 0x58}}, 0x4040) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) (async) ioctl$RTC_UIE_ON(r4, 0x7003) 15:46:47 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 64) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f0000000200)={0x2, 0x5}) (async) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) (async, rerun: 64) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) (async) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) (async, rerun: 32) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x80) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r2}) 15:46:47 executing program 3: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:47 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x0, {0xa, 0x4e20, 0x7, @empty, 0x8}, r1}}, 0x38) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xfffffffb, 0x8], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x204, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8906, 0x0) 15:46:47 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8906, 0x0) 15:46:47 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r2}) 15:46:47 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:47 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x490000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x400a01, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:47 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000000)={0x2, 0x8}, 0x2) 15:46:47 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8906, 0x0) 15:46:47 executing program 0: getresuid(&(0x7f0000000040)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x10001, 0x2, {}, {r0}, 0x1, 0x7ff}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8915, &(0x7f0000000000)={'wlan1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000180)={0x9, 0x6, 0x8, 0x7f}) socket$pppoe(0x18, 0x1, 0x0) 15:46:47 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:47 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x401c0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x4, {0x960, 0x1, "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", 0x0, 0x81, 0x40, 0x4, 0xdb, 0x4, 0xfe, 0x1}}}, 0x128) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000000)={'wlan0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240), 0x13f}}, 0x20) 15:46:47 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x1012c2, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x6, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x0, 0xf4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 15:46:47 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8906, 0x0) 15:46:47 executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xe6) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:47 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:47 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x100, 0x80800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x20, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f00000003c0), &(0x7f0000000400)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f00000004c0)={r3}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={r3, &(0x7f0000000140), &(0x7f0000000180)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f00000003c0), &(0x7f0000000400)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f00000004c0)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {r4, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x2, 0x0, 0x10001}) 15:46:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x1012c2, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x6, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x0, 0xf4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 15:46:47 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000000)={0x0, 0x5}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8906, 0x0) 15:46:47 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x106, 0x5}}, 0x20) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r4, 0x4008af7c, &(0x7f0000000280)={0x3, 0x6}) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000200)) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000001c0)={0x0, 0xef}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @in6={0xa, 0x4e24, 0x6d4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x401}}}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:47 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x2, 0x0, 0x10001}) 15:46:47 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x100, 0x80800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x20, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f00000003c0), &(0x7f0000000400)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f00000004c0)={r3}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={r3, &(0x7f0000000140), &(0x7f0000000180)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f00000003c0), &(0x7f0000000400)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f00000004c0)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {r4, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:47 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000000)={0x0, 0x5}) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8906, 0x0) 15:46:47 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000000)={0x0, 0x5}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8906, 0x0) 15:46:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x2, 0x0, 0x10001}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x2, 0x0, 0x10001}) 15:46:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x1012c2, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x6, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x0, 0xf4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 15:46:47 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x100, 0x80800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x20, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f00000003c0), &(0x7f0000000400)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f00000004c0)={r3}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={r3, &(0x7f0000000140), &(0x7f0000000180)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f00000003c0), &(0x7f0000000400)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f00000004c0)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {r4, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:47 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) socketpair(0x25, 0x800, 0xde, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000640)={0x0, 0x80, 0x7, 0x5, 0x80, 0xff, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x4}, 0x2000, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x5, 0xf1cd, 0x0, 0x361, 0x0, 0x6}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="6b85000000000000000004"], 0x1c}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x4, 0x0, [{0x4, 0xf8, &(0x7f0000000140)=""/248}, {0x5000, 0x8d, &(0x7f0000000240)=""/141}, {0x2969ae3359536e0f, 0x92, &(0x7f0000000300)=""/146}, {0x6000, 0x6b, &(0x7f00000003c0)=""/107}]}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0xd4250fefc1fe856b, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00162cbd7013fcdbdf25080000000800110000000000050022000100000006000e0081000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4081) 15:46:47 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000000)={0x0, 0x5}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8906, 0x0) 15:46:47 executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x22420, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x14}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x70, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x80400, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8, 0x8}, 0x2, 0x4, 0x0, 0x7, 0xe4, 0x4, 0x7, 0x0, 0x40, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0x3) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x24, 0x6}) 15:46:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0x0, 0x65f6}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000000c0)=""/84) 15:46:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x1012c2, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x6, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x0, 0xf4}) 15:46:47 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (async) socketpair(0x25, 0x800, 0xde, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000640)={0x0, 0x80, 0x7, 0x5, 0x80, 0xff, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x4}, 0x2000, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x5, 0xf1cd, 0x0, 0x361, 0x0, 0x6}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="6b85000000000000000004"], 0x1c}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x4, 0x0, [{0x4, 0xf8, &(0x7f0000000140)=""/248}, {0x5000, 0x8d, &(0x7f0000000240)=""/141}, {0x2969ae3359536e0f, 0x92, &(0x7f0000000300)=""/146}, {0x6000, 0x6b, &(0x7f00000003c0)=""/107}]}) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0xd4250fefc1fe856b, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00162cbd7013fcdbdf25080000000800110000000000050022000100000006000e0081000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4081) [ 1676.715962] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 15:46:47 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)={0x0, 0x18}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000080)={0xca, &(0x7f0000000340)="a659281e695745d86ede70a2138848654fa6f39b6caf5128337f57679fe9c81ce92b7d7c6cc651be72980493ab93d782b9f208ec7235468fd1e4db9c744d05469f8147d523d408e1b1708ece960e0e2aee42451845ecb7e632fba5c8b3f1f73afb60b9dd4a1bbbcaa6e8ca0a10741a26e2d988fa18e3622fa71353a2d9d3ce43e0845ea9ac81226e72d6407212e8fb659d0664f8e0ee4964cd7c169e5845a52ded7a5f8ebf8fda6597d63fdbf25bfe01df68caca520e98d70d242fb358d4dd18084947c4f47a4aa6fd3a"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000044) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x8}, 0x2) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x13}) 15:46:47 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x100, 0x80800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x20, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f00000003c0), &(0x7f0000000400)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f00000004c0)={r3}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={r3, &(0x7f0000000140), &(0x7f0000000180)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f00000003c0), &(0x7f0000000400)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {r4, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0x0, 0x65f6}) (async) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000000c0)=""/84) 15:46:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x1012c2, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x6, 0x3}) 15:46:47 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) socketpair(0x25, 0x800, 0xde, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000640)={0x0, 0x80, 0x7, 0x5, 0x80, 0xff, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x4}, 0x2000, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x5, 0xf1cd, 0x0, 0x361, 0x0, 0x6}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="6b85000000000000000004"], 0x1c}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x4, 0x0, [{0x4, 0xf8, &(0x7f0000000140)=""/248}, {0x5000, 0x8d, &(0x7f0000000240)=""/141}, {0x2969ae3359536e0f, 0x92, &(0x7f0000000300)=""/146}, {0x6000, 0x6b, &(0x7f00000003c0)=""/107}]}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0xd4250fefc1fe856b, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00162cbd7013fcdbdf25080000000800110000000000050022000100000006000e0081000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4081) 15:46:47 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x100, 0x80800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x20, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f00000003c0), &(0x7f0000000400)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f00000004c0)={r3}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={r3, &(0x7f0000000140), &(0x7f0000000180)}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:47 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)={0x0, 0x18}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000080)={0xca, &(0x7f0000000340)="a659281e695745d86ede70a2138848654fa6f39b6caf5128337f57679fe9c81ce92b7d7c6cc651be72980493ab93d782b9f208ec7235468fd1e4db9c744d05469f8147d523d408e1b1708ece960e0e2aee42451845ecb7e632fba5c8b3f1f73afb60b9dd4a1bbbcaa6e8ca0a10741a26e2d988fa18e3622fa71353a2d9d3ce43e0845ea9ac81226e72d6407212e8fb659d0664f8e0ee4964cd7c169e5845a52ded7a5f8ebf8fda6597d63fdbf25bfe01df68caca520e98d70d242fb358d4dd18084947c4f47a4aa6fd3a"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000044) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x8}, 0x2) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x13}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)={0x0, 0x18}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000080)={0xca, &(0x7f0000000340)="a659281e695745d86ede70a2138848654fa6f39b6caf5128337f57679fe9c81ce92b7d7c6cc651be72980493ab93d782b9f208ec7235468fd1e4db9c744d05469f8147d523d408e1b1708ece960e0e2aee42451845ecb7e632fba5c8b3f1f73afb60b9dd4a1bbbcaa6e8ca0a10741a26e2d988fa18e3622fa71353a2d9d3ce43e0845ea9ac81226e72d6407212e8fb659d0664f8e0ee4964cd7c169e5845a52ded7a5f8ebf8fda6597d63fdbf25bfe01df68caca520e98d70d242fb358d4dd18084947c4f47a4aa6fd3a"}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1000997ae0a3fb06e4c609000000080003005deb0522ac917b3b12e1b1f9b26561f6028781f76859822d4f7276fc553c2d04001e81bd6438a7105547df4399fd5e0d2f2eb85e0c6b10d69dbb73268b6fd155e67f7e4a635025a03fa89216b0bf391d14f51e9929fe91df159a61b6bcbac62386b50ef0b672c77937d7fa1d22268f48da783ae85a95ffe8758658f2a3b293a4fc5d969ed96a3a946423af130978a46e8484a802abd185bd9ba898c653f012e375b97d110ebcab87e6d9ab4d42df101762ad07ad4c5253069ad216610ce9f6e0af0a4193c23d7a5b619116230e460c592857e308ab3072db9861a6f9e85f8fb67e60b3ce9a545cd7", @ANYRES32=0x0, @ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000044) (async) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x8}, 0x2) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x13}) (async) [ 1676.825189] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 15:46:48 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x100, 0x80800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x20, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f00000003c0), &(0x7f0000000400)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f00000004c0)={r3}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0x0, 0x65f6}) (async) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0x0, 0x65f6}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000000c0)=""/84) 15:46:48 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) socketpair(0x25, 0x800, 0xde, &(0x7f0000000700)) (async) socketpair(0x25, 0x800, 0xde, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000640)={0x0, 0x80, 0x7, 0x5, 0x80, 0xff, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x4}, 0x2000, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x5, 0xf1cd, 0x0, 0x361, 0x0, 0x6}) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r5) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="6b85000000000000000004"], 0x1c}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x4, 0x0, [{0x4, 0xf8, &(0x7f0000000140)=""/248}, {0x5000, 0x8d, &(0x7f0000000240)=""/141}, {0x2969ae3359536e0f, 0x92, &(0x7f0000000300)=""/146}, {0x6000, 0x6b, &(0x7f00000003c0)=""/107}]}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0xd4250fefc1fe856b, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00162cbd7013fcdbdf25080000000800110000000000050022000100000006000e0081000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4081) [ 1676.893863] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 15:46:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x6, 0x3}) 15:46:48 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)={0x0, 0x18}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000080)={0xca, &(0x7f0000000340)="a659281e695745d86ede70a2138848654fa6f39b6caf5128337f57679fe9c81ce92b7d7c6cc651be72980493ab93d782b9f208ec7235468fd1e4db9c744d05469f8147d523d408e1b1708ece960e0e2aee42451845ecb7e632fba5c8b3f1f73afb60b9dd4a1bbbcaa6e8ca0a10741a26e2d988fa18e3622fa71353a2d9d3ce43e0845ea9ac81226e72d6407212e8fb659d0664f8e0ee4964cd7c169e5845a52ded7a5f8ebf8fda6597d63fdbf25bfe01df68caca520e98d70d242fb358d4dd18084947c4f47a4aa6fd3a"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000044) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x8}, 0x2) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x13}) 15:46:48 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)={0x0, 0x18}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000080)={0xca, &(0x7f0000000340)="a659281e695745d86ede70a2138848654fa6f39b6caf5128337f57679fe9c81ce92b7d7c6cc651be72980493ab93d782b9f208ec7235468fd1e4db9c744d05469f8147d523d408e1b1708ece960e0e2aee42451845ecb7e632fba5c8b3f1f73afb60b9dd4a1bbbcaa6e8ca0a10741a26e2d988fa18e3622fa71353a2d9d3ce43e0845ea9ac81226e72d6407212e8fb659d0664f8e0ee4964cd7c169e5845a52ded7a5f8ebf8fda6597d63fdbf25bfe01df68caca520e98d70d242fb358d4dd18084947c4f47a4aa6fd3a"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1000997ae0a3fb06e4c609000000080003005deb0522ac917b3b12e1b1f9b26561f6028781f76859822d4f7276fc553c2d04001e81bd6438a7105547df4399fd5e0d2f2eb85e0c6b10d69dbb73268b6fd155e67f7e4a635025a03fa89216b0bf391d14f51e9929fe91df159a61b6bcbac62386b50ef0b672c77937d7fa1d22268f48da783ae85a95ffe8758658f2a3b293a4fc5d969ed96a3a946423af130978a46e8484a802abd185bd9ba898c653f012e375b97d110ebcab87e6d9ab4d42df101762ad07ad4c5253069ad216610ce9f6e0af0a4193c23d7a5b619116230e460c592857e308ab3072db9861a6f9e85f8fb67e60b3ce9a545cd7", @ANYRES32=0x0, @ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000044) (async) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000044) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x8}, 0x2) (async) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x8}, 0x2) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x13}) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x13}) 15:46:48 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x100, 0x80800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x20, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f00000003c0), &(0x7f0000000400)}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) [ 1676.992123] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 15:46:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20020) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x6, 0x3}) 15:46:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20020) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:48 executing program 1: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x24, 0x0, 0x710, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xf1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4000040) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000011c0)={0x3, 0x6, 0x0, 0x1000, &(0x7f00000001c0)=""/4096, 0xf, &(0x7f0000000040)=""/15, 0xca, &(0x7f0000000080)=""/202}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000001340)={0x3, 0x0, &(0x7f0000001300)=[0x0, 0x0, 0x0]}) 15:46:48 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:48 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x100, 0x80800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x20, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:48 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1f, 0x800, 0xfffffffb, &(0x7f0000000180)) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f00000001c0)) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bdf67000fedbdf2565000000080003", @ANYRES32=r1, @ANYBLOB="08000200010000000800020000000006080002000000000008000100f28600000800010000000080"], 0x44}, 0x1, 0x0, 0x0, 0x24040044}, 0x40448c0) 15:46:48 executing program 5: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x6, 0x3}) 15:46:48 executing program 1: ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000180)) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000005c0)={0x2, 0x0, &(0x7f0000000040)=""/24, &(0x7f0000000440)=""/218, &(0x7f0000000540)=""/76, 0x5000}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r2, 0x8004af7a, &(0x7f0000000400)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000200)="084e831cf270275ba9efcabc956dfb6b081244a4045454b9323813881badb12601e3f12d64225b63adb29359a68621ef6639c4aec689744a2d37a2354df7e49dd19339d001d9e1764159ebed7c826b0880ee25b966c968bbad2625367a1740efc742f38537a81f1251bd129716eef7d92746d5463d3627ceae5a90fdcadd831c39c780f5f6df087fb8a0d62535e6fc88274a5453d810c4c47304dad6a2a706a8402ae769251f97c6e14cb26c23ed08fcda6a68905c4a8a7d88", 0xb9, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r3}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x1], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000003c0)=0x8000000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000300)={0x8, 0x3, 0x20}) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000100)={r6, 0x50}) 15:46:48 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00', 0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1f, 0x800, 0xfffffffb, &(0x7f0000000180)) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f00000001c0)) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bdf67000fedbdf2565000000080003", @ANYRES32=r1, @ANYBLOB="08000200010000000800020000000006080002000000000008000100f28600000800010000000080"], 0x44}, 0x1, 0x0, 0x0, 0x24040044}, 0x40448c0) 15:46:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x2, 0x5, 0x5, 0x77, 0x3ff, 0x5, 0x6}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) 15:46:48 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x100, 0x80800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:48 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20020) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20020) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:48 executing program 5: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x6, 0x3}) 15:46:48 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1f, 0x800, 0xfffffffb, &(0x7f0000000180)) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f00000001c0)) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bdf67000fedbdf2565000000080003", @ANYRES32=r1, @ANYBLOB="08000200010000000800020000000006080002000000000008000100f28600000800010000000080"], 0x44}, 0x1, 0x0, 0x0, 0x24040044}, 0x40448c0) 15:46:48 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x100, 0x80800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:48 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="b182c5e6fd195a7d91bc9e0b4f6c29570eff8130", @ANYRES16=0x0, @ANYBLOB="080029bd7000fbdbdf250100000008000100380000000c009900050000001d000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40c0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x9, 0x6, 0xb4, 0x6, 0x7, 0x3, 0xfffffffb, 0xffffffff], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000200)={0x87a, 0x0, 0x9}) connect$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @private=0xa010102, 0x2}, 0x10) 15:46:48 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x4}) 15:46:48 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x100, 0x80800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="1ceb9e6e049b1a1a346eb904a5957ad4f16439a2d292596329ff72542b5b50b9943cf81dce8a61dd73d23e4b362620798895cf485036570640751c4fddcda57dad8415b8eaada620d77a472ea56a", 0x4e}) 15:46:48 executing program 5: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x6, 0x3}) 15:46:48 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000080)={0x3, 0x7, 0x0, [{0x78c, 0x2800000, 0x1, 0x7f, 0x7f, 0xfe, 0x7, '\x00', 0x8045}, {0x5, 0x8000000000000001, 0x5, 0x1f, 0x6, 0xd9, 0x20, '\x00', 0x9}, {0x7f, 0x9, 0xffffffffffffffff, 0x5, 0x6, 0x3, 0x7f, '\x00', 0x100000000}, {0x3, 0xfffffffffffffffe, 0x5, 0x3, 0x1, 0x6, 0x9, '\x00', 0xb82}, {0x2708, 0xfffffffffffff027, 0x400, 0x80, 0xfd, 0xa0, 0xc0, '\x00', 0xd825}, {0x20, 0x7, 0x0, 0x2, 0x6, 0x2, 0x8, '\x00', 0xfffffffffffffff9}, {0x6, 0x2, 0x2, 0x0, 0x1, 0x9, 0xfe, '\x00', 0x101}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:48 executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:46:48 executing program 3: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x100, 0x80800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x20, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:48 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4000) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000500)={0x0, 0x8, 0x0, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000380), 0x1, 0x0, &(0x7f00000004c0)=[{}]}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000005c0)) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000580)={{0x80000000, 0x0, 0x3, [0x0, 0x7]}, {0x80000000, 0x0, 0x6, [0x116, 0x6e6]}, 0x2, [0x9, 0xfffffff8]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:48 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x6, 0x3}) 15:46:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="1ceb9e6e049b1a1a346eb904a5957ad4f16439a2d292596329ff72542b5b50b9943cf81dce8a61dd73d23e4b362620798895cf485036570640751c4fddcda57dad8415b8eaada620d77a472ea56a", 0x4e}) 15:46:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x3e, 0x9, 0xfffffffffffffffe}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x1, 0xf7], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:48 executing program 3: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x100, 0x80800) r0 = syz_open_dev$media(&(0x7f00000000c0), 0x20, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:48 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4000) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000500)={0x0, 0x8, 0x0, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000380), 0x1, 0x0, &(0x7f00000004c0)=[{}]}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000005c0)) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000580)={{0x80000000, 0x0, 0x3, [0x0, 0x7]}, {0x80000000, 0x0, 0x6, [0x116, 0x6e6]}, 0x2, [0x9, 0xfffffff8]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000580)={{0x80000000, 0x0, 0x3, [0x0, 0x7]}, {0x80000000, 0x0, 0x6, [0x116, 0x6e6]}, 0x2, [0x9, 0xfffffff8]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:48 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x6, 0x3}) 15:46:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="1ceb9e6e049b1a1a346eb904a5957ad4f16439a2d292596329ff72542b5b50b9943cf81dce8a61dd73d23e4b362620798895cf485036570640751c4fddcda57dad8415b8eaada620d77a472ea56a", 0x4e}) 15:46:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x1, 0xf7], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:48 executing program 3: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0), 0x20, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:48 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4000) (async) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4000) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000500)={0x0, 0x8, 0x0, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000380), 0x1, 0x0, &(0x7f00000004c0)=[{}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000500)={0x0, 0x8, 0x0, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000380), 0x1, 0x0, &(0x7f00000004c0)=[{}]}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000005c0)) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000580)={{0x80000000, 0x0, 0x3, [0x0, 0x7]}, {0x80000000, 0x0, 0x6, [0x116, 0x6e6]}, 0x2, [0x9, 0xfffffff8]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x3e, 0x9, 0xfffffffffffffffe}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x1, 0xf7], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r1}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:48 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x6, 0x3}) 15:46:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x9, 0x7, 0x2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:48 executing program 3: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x20, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x3e, 0x9, 0xfffffffffffffffe}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:48 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x3, 0x80, 0x1f, 0x1, 0x9, 0x20, 0x0, 0x7fffffffffffffff, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x92, 0x1, @perf_config_ext={0x100000001, 0xfff}, 0x4000, 0x1, 0x7c6, 0x2, 0x2, 0xbb5, 0x2, 0x0, 0x7, 0x0, 0x5}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x2, 0x40203) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x3, 0x80, 0x7, 0xf5, 0x9, 0x6, 0x0, 0x3ff, 0x1006, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x808, 0x1, @perf_config_ext={0x9, 0x5}, 0x200, 0x8, 0x1000, 0x9, 0x81e, 0xffffffff, 0x9, 0x0, 0x7fc000}, 0xffffffffffffffff, 0x6, r3, 0x4) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000280)={0x10}) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x4, 0x4, 0x1f, 0x0, 0x7, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9855, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x5000, 0x4, 0x2, 0x9, 0x8001, 0x3ff80000, 0xff58, 0x0, 0xffffffc0, 0x0, 0x81}, 0x0, 0xf, 0xffffffffffffffff, 0xa) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000002c0)) 15:46:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x1, 0xf7], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x6, 0x3}) 15:46:48 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x9, 0x7, 0x2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:48 executing program 3: r0 = syz_open_dev$media(0x0, 0x20, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x3e, 0x9, 0xfffffffffffffffe}) 15:46:48 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x3, 0x80, 0x1f, 0x1, 0x9, 0x20, 0x0, 0x7fffffffffffffff, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x92, 0x1, @perf_config_ext={0x100000001, 0xfff}, 0x4000, 0x1, 0x7c6, 0x2, 0x2, 0xbb5, 0x2, 0x0, 0x7, 0x0, 0x5}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x2, 0x40203) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x3, 0x80, 0x7, 0xf5, 0x9, 0x6, 0x0, 0x3ff, 0x1006, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x808, 0x1, @perf_config_ext={0x9, 0x5}, 0x200, 0x8, 0x1000, 0x9, 0x81e, 0xffffffff, 0x9, 0x0, 0x7fc000}, 0xffffffffffffffff, 0x6, r3, 0x4) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000280)={0x10}) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x4, 0x4, 0x1f, 0x0, 0x7, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9855, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x5000, 0x4, 0x2, 0x9, 0x8001, 0x3ff80000, 0xff58, 0x0, 0xffffffc0, 0x0, 0x81}, 0x0, 0xf, 0xffffffffffffffff, 0xa) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000002c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x3, 0x80, 0x1f, 0x1, 0x9, 0x20, 0x0, 0x7fffffffffffffff, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x92, 0x1, @perf_config_ext={0x100000001, 0xfff}, 0x4000, 0x1, 0x7c6, 0x2, 0x2, 0xbb5, 0x2, 0x0, 0x7, 0x0, 0x5}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000}) (async) syz_open_dev$dri(&(0x7f0000000240), 0x2, 0x40203) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000300)={0x3, 0x80, 0x7, 0xf5, 0x9, 0x6, 0x0, 0x3ff, 0x1006, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x808, 0x1, @perf_config_ext={0x9, 0x5}, 0x200, 0x8, 0x1000, 0x9, 0x81e, 0xffffffff, 0x9, 0x0, 0x7fc000}, 0xffffffffffffffff, 0x6, r3, 0x4) (async) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000280)={0x10}) (async) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f00000001c0)=0x4) (async) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x4, 0x4, 0x1f, 0x0, 0x7, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9855, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x5000, 0x4, 0x2, 0x9, 0x8001, 0x3ff80000, 0xff58, 0x0, 0xffffffc0, 0x0, 0x81}, 0x0, 0xf, 0xffffffffffffffff, 0xa) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000002c0)) (async) 15:46:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x1, 0xf7], 0x2, 0x80800}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x9, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:49 executing program 3: r0 = syz_open_dev$media(0x0, 0x20, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x6, 0x3}) 15:46:49 executing program 1: ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x3e, 0x9, 0xfffffffffffffffe}) 15:46:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:49 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000002680), 0xa002, 0x545000) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1022) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x30, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x34}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x22c8, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x22a8, 0x33, @data_frame={@no_qos=@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x80}, @device_a, @from_mac=@broadcast, @device_a, {0x7, 0x81}}, @a_msdu=[{@device_b, @device_b, 0x8f, "c186ae2f5b6fc00ee0c98cb1e200d47b92c7a6a5b39f44dd45b0e51325a6d9b6a2cd0c97596fb6bcc78cc899bfb991190e5a87e46826e6b82cdd38c6d52c1f8219c580fc025ffa08b39087ea0aa470d69f0ceadcfdfdee9b1846c938a14c1a69f3037f3cf41474161645132df688e139dc2434265637cf063026584ce1ccd64cee76f238ca1275837c69afecad744b"}, {@device_b, @device_b, 0xb9, "34c187a42fea0204687cf6e78d92eb32556d6a84cdab9e28300e25f8eeadc77473fdc0fb76b5366e01f40666d758146dd57347f543817a17c2775b09733a3a6bf794f346b61e065d3d98972ede7ca566ea5faf80a4841c9a1cb3f745086a8e76afec94f71256f68a4e06d738a0f33ac1f2fc7d003bfa035394a1767299528095639a2754040923f4601a6b9b0dc2a6761b38f259c6309fc049de0cfd6e6ed93c1bb47e13b55cca80ee91163a6d5016fe1834a227272d111b7d"}, {@device_a, @device_a, 0x1000, "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"}, {@device_b, @device_b, 0x17, "8bce93f4bb95b20df3185a8612e575166bfc9261d02c16"}, {@broadcast, @broadcast, 0xcb, "0637b795640fc2862277a30781e0418a8588685fc820ea814940b238157990a32ce0d75c02ac6d88cb0672cbecca10a0c3a9ab734791d6e16f0f933f8e2cddc4fc30782a645979b9e2395ffb5a75640d4ce25244c6698477067418dcbb3fdaff7c4449e6dc5da47698591e28460b9ddd49efc16804a0fdd649b14d27e0ed4e50ae762c483f5dab23a220f435e4f197a4e3283c80bc52c52b75a0e94599e62b8dc6a4fe52a47a742b2cdbf5878a533790eb6ec9ada13832a44130cfc3f0afa4a87ede54ba4c0b70c0c38005"}, {@broadcast, @device_a, 0x1000, "018776d2664f99ddcde286937664724d52a50d54b2627f25b79d88045fa1427415f0b8c819d37ac45da9075a91eeb4d78570c42011ca2d4b4d274fbd2af37ee396e6070dfca8537559f5a5b8ada33207320e684ed5856b3d09bdb4b47bdd3ce81764a6df0038e3df957261fa0ec0b3be7fa040b765bde3851e66d59c8bba7341d1f962897644e248801f71d74330bbc00c109868a8a0f073361efb167a928ffc05c312418ee4e4aa1b9c700a213b966fa746242c8e1e13c6b2dcae8efa50b5f58873630d102dc30bc7decd3c2aaf69726f02d206e9f09221af4761f4393c0fa148552773fd0b19dec2577734b887e03e0efa7f75df989615116771d50b443d1f5d45eee2581db225a43fc0af71664da138b88d72e3285c6540016683ad425385389e3b4575f40fb5348de4493a5de73ed0f2cb98f2444ca21516f8b02e32eee179b3d994565f215e15c8137098dc473f67769b8eefb6507222eecc5fcedf0ba894bf5c98e10ece1c01f1fa0699d505a91e2ef07472f5f37892a2667a5595d29834950c3d4ac78e109c12110a3956867a78888ec69838cb04c02426f2b884bb4148746f6188922239b4e857118f0a36bcdddc1f15edfc6cb0b08e675cd432dc591952ba6bbd640083d5461b3dbad814b225019dc8668ae7a54526da27b18ebcb655c146986f6e689895c8231c33133b8be5913b03d0a181b138e180bd405564292dd0628315dc6fdfc65f8e51c25995eb968a8e2e3f044055459875a5a1090b30c9743849c4a954d1052946ff69d9d0192936f0e0bfea203c912a146f9c72eed2ac99a06cd125e98ed3e4d9e95fd2db6dbfcd6e269fc620e4df1bef3da2e0d348c7dd4802dd89941e55a98242c3402d5e4ea2140efa603485ba89f55aa7db491b99d7f70948edba50219afdf768096c5809f8b61d077712db38ebcf3bfeb83a1c617f958b6febae24f965dcd496eb8ced50b1c344e7f4cf2bf7689dd2efccf34d2083bc204dd0dc01221289761c88f05bfa5a0a1f29a1ea1eeaaae2a7f82e19e5ab878a130c48d367c5b6fe1d586d4ec9c6ee2aee3960e29fb791de9dafc310414ef8d2cae8b54c9d4ea8eca2f9d7c50c7051fcf1a229a322bb75ee89a1784e1e5efa979f5b0210083313d49f540b7b7a329c7a223a56ca0419661d803b797a186f51aaeeebd9c9e394095fccf67cb0fccc2c0f8005673bfaf544bae52e9cf239b3aeafc74351ecc4249fcb60a3ef810b01544f2c2a3aefd41fbc2c2f8517c565fc8ae88a030a1668139fd230b78e1a190e646fea4e958fd0661a4a2b2a57eae50be38c0c7d28d528a44c5c681845f8a192fc0e8542c05ed113c5c4aab4a19321adac49a453b511d01cf16e36a8f475117c11f82e1641486fa4888cde0bef2125f1069754e7b8b28731fbb51cfd7ea8916e3a4e224cd74c938ceca8b7a214ae963e364fb3815c9996880ea26ea8e580ed1e6e0ebfc75466fd2bb604c1d4d631df5e2abdba55a2ac7868d7b3a861b62a741ffcc2fe2943a8552f0d3b862e11c1d13c7935ea90a2ef60cc3c83519477045fa9ab557b8f6c8a01c415c7a0225ba6ddcd2faf245d7447025a84967c3ec38889c441ddeecc83a6315c99456d69ae1f4b803a9e14d57f0cf4fe66bc96085531ef9ced6aa8742347a893280f6ea2a561c7b3aed1410f372362b54003aafe05c5aab279092cd39d0db4449389fe48ec8ebf7edafeec0fd7deb47a950788ebe1ffe2c3c1ba4305873acc5a124c1512f2100fe8741a401cd0916a09a17ff5e777472a1da8249fcbfa94ea730037b3d5379a091104c6be0efafc45f868c03fa22e01fe47017b36a8508890ff25e1913a9c33a171da8f5b8fa356880fb42c2049c5322b39694ae75c40c197234b7fabd77a9cd6fca910ce46fcaa6e0b2d2b93f37cdb88bf66676e4a7342a7f1aada3315a4b853587c753d30dc09d9a9b1b7c177e867162fc920514e00960278480e38f58de2e7835be039f1dc8cda4431389a78e52951e7fa5dd86ba083255b1ce7f80f826da04047db56813e06dcb1f2f505ea53a22ef3c32fd7a84b3219a76f253147f03f795962414d7ebf61315410f42cedcaf79014ce072927feacfe70a7c58c9fb047fc6cac4bbd4e1bf04d6c2c4203a42c0c1e74585e69d5aba1f88454cdaa4cd25d530eaab4a1c7a1223836cf6950f9cdd92d06208a097e6dcb100bbc1374e0364faeab91a5ceebba21a4826d5c8a86b0aeb0b26908a59cd813fb119b9237106aea2332d1bd329f0ec8f292d8677c2a800c0b104acb5ca6928f365ab4e4cda7a21319bf0e1ae9cbe309cab6941883199692d7c2663c3c9297d9358fad728c97a8c7c641ec8476f4fb78ffda2bf16fee1f0101e345590a7c9a31bbe77fb767ac3ab665ca1de4ee7b5a004f62df6e7b6f14e2174b95c26bc30c3fcbf17992176190316f5da3e88c4bf04d8c9e3dec64f5cf7a03bb36500dd024f1beca997d5ddb0c1677cbb2e3dca833f3aa652c3ecde2d0a0e4e9d754c0e196c483767b9be5a906f3bfcd459a6ea0f90e563888fecbb0127d10cd18d7873fd45667ccbfceb13c888d5808040d99e05d2146a51245fe56df19137066d4aa5626867cb7ce836e7c96bf9725cdaa24762e431c9c90917aaf589508cb5670892c33f83cf2ca8b3db4c48a1e0fd708d957a3d8889f1bf387fca9a15b1a3a45c239537408ef9725531f4d3803b151c2cce0e81fe9e9bbcebc51c9d4002f8cd3e0b7b5929b4a59d6c8ea8bf6feaaf414a00727083ce81313abe387c376cc328c2e61bd02f2fa3d12841f28683b93c1d2f347cde5e97ca83a0a00c8a760397df5368ce2f2c5d4ac75e1f1d7b6fe5f9c6f41e95dfe35ef0334f543055efe72288b4e7c2b584ec64c244d504f71e02bc42dd5fee87276766b8186384c34e782fc1c43b9d212b6c65eb945bcef8bd6720e655547a105aa78c0ecbb7c3318a1270f2e34978c5c92ed6a9fe4af9ddc85bfbc2423c64674f3a9fad2289b88b433f083367fd01726c7706a3bdd4d0caba3b280f8372a4e6c2e0c5c1a850a8ef1903e99e0874623b3e345b290d3be4c584cecc009317c5bf8f6764c21ac03cdfeea6cbaf65fa4f3e330857cf2df263bed06d1edbe73ef7fa72574b2d60148f79607487650bb33965e62f1cde1bb4df7a08285e71b57126b87b88613c02c1ab1ff2aa1cffe648a21027497ef34d2b2c78fe94dbef4e93105e1cdf0c51c6401f3d99944b9a6ecdc1a18e6b5a76ae030fa6a291b561606a97d7bbb2e34c894623367bc75ed30f0e23eb363ef0982e2176abc918a6a886833065fb0f3b2c2af1436f3460cc21b3679385fd044f51ec7c892abe4540aecd6678b36c2be2b3881b54f81c55d137c05b98acaea6e44df7c2e8e4881798af1d778df6e5f506f35ebf0ca1d79bb8a08380c80b638edda0e560d97e6f9954c33c1e5686959f68ab1e6b3d75fc9b2c16a5f5703d8afc5f9ba9e42c26523b816df6d8de71080c116f7a237bc44b95d4177eaa7e7bb9aef00ef8bc5d215a6de5150a85e0c1ffd7ee455dd65ee53bbbccaa955aa8673774fac66e07952b5b17b639bde4da90aec3066ab869b87c8bf75209fab9fc3a02c27c78e06eff7f1848d5859ad13e45701fac9524e67f370375ca78578c3ab6f75f841b9e7bdcb6efa7d48e078bdc827300b2a1382abbecaf50f7fa1154a25cc335c6994b487cb3452e37c040593786e4fd378eb61cd26911e0cdf586902c0dafd0fe37988d1262fac8a8ae97bed2b004155f0ca18c86276cb7e96cdabaa8a9534bd09b5f2da7ca18f8720df4fd9112b2ef9da968a8a26390d09c380cb4d41fa57c3966e60838f5d1f85d6e531a6ccf681a998225526f7f655a6ef96af84b4af81ebfcf444afe360f7395679a2391316c8f70a85fa1ab7635440bfd997cb11ef64b00eb8132abd3b3f7bc6fb26b1a27deac3715869ae773d226b72c340d231da8f692345d2c2898d99ad34948e2a46e815defdc8d6fd86ff3afbde148d44714748cfdb84a0450875f61e78fe97e34b63f688b96dd399bcf50fca7bad6a99c03cbf1f40fcc64a3ba717b40369d21a2bf3bdf978cd96a76065780c8969e020ab5f23f73d581b5c3750ac7423e601e67d7c0832d777dcbc38e3a59aba7bccb9a18ef04bd8d2e28285f4013607fe00b1093b89e780b9ca28cdc3ae51a356598839e26f2417a15e1d360a8d18f599e8568403b983fc1724af0555ba3301dc9ebc71b665c5891450e46e786fdf98c60f8ff313fff021e7e40fcc5c1b81418e8523f04c04a20561929200b1f8a07380be00356be6ee61f46ceb8a86ee01e625532a895242e47e0f9a2c139bf5384adf5028e3b29ba560c57c8e0642ebdb241e3b75e6e1d815ce898ea9132ddd8c4b877299646ec52d25b9e98e99c332c1c8cda91d57c3b3a2ee99e7264e6d7173665afb14a4ac6d25cbc6984d12fa1d3853af0896bb571a84877fbd8e99e5f2d165377cc578ad5aec498bbf0ecc6fac53f99caaac56f37449ebbf34a72a3361ee7a333994e1d19a1b5e5b7ea04d7a0380d71c49267e3c98f27b3440955d20a62a56a9e9d2f689b5e70f796f85ae54176c705e9ca93082139cfd85e94adfb2e0451c7ccacabcb30c5590a2ddb35a39f705ac43709a2427d109a513c260b05be43c609168974e1e46de388fecb9cb0ebabb213ece00fa8d2e7c5dc178fc48a90bc5e618cc1f200afcda06d33691226842e4cffa6405d8649d989aa57460eefd7b4154c6584f8cafd8e39ac8a3460c676d9d66e3538489c81fd4e538e3a7cad83ff8bcef7f4b9a418724fb58485f6370d9e336a72d2dee3415906a9e8921dbaca751cde1da4f7fd036184d5e7d448dd3e0d1e5f37cee0dc07c3571e9d1c883c38e24529180f5104c7b2eb7bf58f19d3afddc9be5ccf9d1a0f1db1725a5ba48652f07e9aa3775193b3511c012dca1fad62c2f9437c995321a80f3402ad5a6d55bc93b5372451a2538b5ea14d941212d844c9ac1e9366b59adfee428722462a75b70fe04adf579d5ae0f51c36f3c90235ead8893b919a279bd425d8097ad23c35827b0550a955204b3102b9481717e5102dc0da184d43ed686d085ef57b8a40a9247daabde895719d854be807eb441bc0a7ebdd0dae9489c9051de452d5ba4f70408e11d24e388ef6fb680c951246d2eb8da261e1019089edd26053495845bfa59a923c387cf11df8ada7656e72c8f63c688cc700857c03057e505a2db0790716b602b58588ce05cd3eda1ee5b786a8bb68456f2fbaed7b9c3ef6ac89ee5a75f0ead643797fa71a63ec6bca2b073b8b4669d82b6f140f3cd34bfbd907da07586eda8926710fc42428c07ca7fff38a21682aec3d7fd1f9b0d9a82a0a949816b558e73c7cdfa7d173df4c85d3fa71372ddabdc471a4dd373b66da18b8504049ab0c98903317d8b0f2b2ea552d7ef1c5c78dbc5980ef1b3c5d517500db07dcc50303147f9896b4f91f1e2db6027cd0a13de0198f41e1b78ae7feae2fad242df659ca147de4e39713867e26e8a6e31e626b3b2c02a20eb25dd151eeb1442414d6c173a7dc03eea2f3a139ab82cd96a27a7c43c3e791d278ca7757d23741bcb481b8cdf08dd93c857e370093b80ce452214f8df08c60eabdd15a87ca7d3dad2034243cbaf41467147491940e8eac210fd491838f2e30b65c4e9a5bccf315a2bd14f645cb86b649040bfc4034c0d1b0ec12d4966be8e85e3fe0902bfc178b350c7bc65a4a6005457f32fe888c93960023b1ea5526b0fac9af44eb82ecfe083e5615cd70cb3"}]}}]}, 0x22c8}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000002540)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f00000001c0)={r4}) 15:46:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x6, 0x3}) 15:46:49 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x3, 0x80, 0x1f, 0x1, 0x9, 0x20, 0x0, 0x7fffffffffffffff, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x92, 0x1, @perf_config_ext={0x100000001, 0xfff}, 0x4000, 0x1, 0x7c6, 0x2, 0x2, 0xbb5, 0x2, 0x0, 0x7, 0x0, 0x5}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) (rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x2, 0x40203) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x3, 0x80, 0x7, 0xf5, 0x9, 0x6, 0x0, 0x3ff, 0x1006, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x808, 0x1, @perf_config_ext={0x9, 0x5}, 0x200, 0x8, 0x1000, 0x9, 0x81e, 0xffffffff, 0x9, 0x0, 0x7fc000}, 0xffffffffffffffff, 0x6, r3, 0x4) (async, rerun: 64) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000280)={0x10}) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f00000001c0)=0x4) (async, rerun: 64) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x4, 0x4, 0x1f, 0x0, 0x7, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9855, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x5000, 0x4, 0x2, 0x9, 0x8001, 0x3ff80000, 0xff58, 0x0, 0xffffffc0, 0x0, 0x81}, 0x0, 0xf, 0xffffffffffffffff, 0xa) (async, rerun: 64) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000002c0)) 15:46:49 executing program 3: r0 = syz_open_dev$media(0x0, 0x20, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:49 executing program 1: ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x3e, 0x9, 0xfffffffffffffffe}) 15:46:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:49 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x2, 0x8c16}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) socketpair(0x8, 0x2, 0xb123, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:49 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x6, 0x3}) 15:46:49 executing program 3: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:49 executing program 0: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:49 executing program 1: ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x3e, 0x9, 0xfffffffffffffffe}) 15:46:49 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x2, 0x8c16}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) socketpair(0x8, 0x2, 0xb123, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, 0x0) (async) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x2, 0x8c16}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) socketpair(0x8, 0x2, 0xb123, &(0x7f00000000c0)) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) 15:46:49 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x6, 0x3}) 15:46:49 executing program 3: syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:49 executing program 0: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:49 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x3e, 0x9, 0xfffffffffffffffe}) 15:46:49 executing program 3: syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:49 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x6, 0x3}) 15:46:49 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, 0x0) (async, rerun: 64) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x2, 0x8c16}) (async, rerun: 64) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) socketpair(0x8, 0x2, 0xb123, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:49 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x3e, 0x9, 0xfffffffffffffffe}) 15:46:49 executing program 0: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:49 executing program 3: syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 15:46:49 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x4, {0x800, 0x4, "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", 0x3f, 0x9, 0x2, 0x1f, 0x3, 0x4, 0x3, 0x1}, r3}}, 0x128) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18) 15:46:49 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x3e, 0x9, 0xfffffffffffffffe}) 15:46:49 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:49 executing program 2: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:49 executing program 3: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0) 15:46:49 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x4, {0x800, 0x4, "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", 0x3f, 0x9, 0x2, 0x1f, 0x3, 0x4, 0x3, 0x1}, r3}}, 0x128) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18) 15:46:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 15:46:49 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x3e, 0x9, 0xfffffffffffffffe}) 15:46:49 executing program 2: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 15:46:49 executing program 3: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0) 15:46:49 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x4, {0x800, 0x4, "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", 0x3f, 0x9, 0x2, 0x1f, 0x3, 0x4, 0x3, 0x1}, r3}}, 0x128) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18) 15:46:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) 15:46:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x3e, 0x9, 0xfffffffffffffffe}) 15:46:49 executing program 2: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:49 executing program 3: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0) 15:46:49 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) 15:46:49 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x3e, 0x9, 0xfffffffffffffffe}) 15:46:49 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) 15:46:49 executing program 3: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x0, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:49 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:49 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x3e, 0x9, 0xfffffffffffffffe}) 15:46:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:49 executing program 3: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x0, [0xc]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:49 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x5, 0x3}) 15:46:50 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x3e, 0x9, 0xfffffffffffffffe}) 15:46:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:50 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:50 executing program 3: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:50 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x3e, 0x9, 0xfffffffffffffffe}) 15:46:50 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:50 executing program 3: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{}, {0x80000000, 0x0, 0x0, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x4, 0x3}) 15:46:50 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:50 executing program 4: recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000080)=""/207, 0xcf, 0x2, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) 15:46:50 executing program 3: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{}, {0x80000000, 0x0, 0x0, [0x1000]}, 0x4, [0x1000, 0x20]}) 15:46:50 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x3, 0x3}) 15:46:50 executing program 3: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{}, {}, 0x4, [0x1000, 0x20]}) 15:46:50 executing program 4: recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000080)=""/207, 0xcf, 0x2, 0x0, 0x0) (async) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000080)=""/207, 0xcf, 0x2, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) 15:46:50 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x2, 0x3}) 15:46:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:50 executing program 3: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{}, {}, 0x0, [0x1000, 0x20]}) 15:46:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) 15:46:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) 15:46:50 executing program 4: recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000080)=""/207, 0xcf, 0x2, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000080)=""/207, 0xcf, 0x2, 0x0, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) 15:46:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x1, 0x3}) 15:46:50 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:50 executing program 3: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{}, {}, 0x0, [0x1000]}) 15:46:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x0, 0x9, 0xfffffffffffffffe}) 15:46:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) 15:46:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) 15:46:50 executing program 3: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)) 15:46:50 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={r1}) perf_event_open(&(0x7f0000000080)={0x9, 0x80, 0x81, 0x4, 0x36, 0x9, 0x0, 0x1, 0x2000, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x1, 0x0, 0x1ff, 0x2, 0x2, 0x10000, 0x18b, 0x0, 0x29, 0x0, 0xa3e4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:50 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100), &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) [ 1679.500014] [drm:drm_calc_timestamping_constants] *ERROR* crtc 29: Can't calculate constants, dotclock = 0! 15:46:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100), &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) 15:46:50 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:46:50 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={r1}) perf_event_open(&(0x7f0000000080)={0x9, 0x80, 0x81, 0x4, 0x36, 0x9, 0x0, 0x1, 0x2000, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x1, 0x0, 0x1ff, 0x2, 0x2, 0x10000, 0x18b, 0x0, 0x29, 0x0, 0xa3e4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x0, 0x9, 0xfffffffffffffffe}) 15:46:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x0, 0x9, 0xfffffffffffffffe}) 15:46:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x0, 0x0, 0x0}) 15:46:50 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={r1}) perf_event_open(&(0x7f0000000080)={0x9, 0x80, 0x81, 0x4, 0x36, 0x9, 0x0, 0x1, 0x2000, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x1, 0x0, 0x1ff, 0x2, 0x2, 0x10000, 0x18b, 0x0, 0x29, 0x0, 0xa3e4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100), &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) 15:46:50 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={r1}) perf_event_open(&(0x7f0000000080)={0x9, 0x80, 0x81, 0x4, 0x36, 0x9, 0x0, 0x1, 0x2000, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x1, 0x0, 0x1ff, 0x2, 0x2, 0x10000, 0x18b, 0x0, 0x29, 0x0, 0xa3e4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) 15:46:50 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x7, 0x0, '\x00', 0x1}) 15:46:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x0, 0x9, 0xfffffffffffffffe}) 15:46:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) 15:46:50 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={r1}) (async) perf_event_open(&(0x7f0000000080)={0x9, 0x80, 0x81, 0x4, 0x36, 0x9, 0x0, 0x1, 0x2000, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x1, 0x0, 0x1ff, 0x2, 0x2, 0x10000, 0x18b, 0x0, 0x29, 0x0, 0xa3e4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) 15:46:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) 15:46:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x7, 0x0, '\x00', 0x1}) 15:46:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) 15:46:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x3e, 0x0, 0xfffffffffffffffe}) 15:46:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) 15:46:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x7, 0x0, '\x00', 0x1}) 15:46:51 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000100), 0x200, 0x549002) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000040)={'wlan1\x00'}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r2, 0x4008af7c, &(0x7f0000000140)={0x1, 0xfffffff8}) 15:46:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) 15:46:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x7, 0x0, '\x00', 0x1}) 15:46:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x0, 0x0, 0x0}) 15:46:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x3e}) 15:46:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x7, 0x0, '\x00', 0x1}) 15:46:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], &(0x7f00000001c0)=[{}, {}], 0x7, 0x0, '\x00', 0x1, 0x2}) 15:46:51 executing program 0: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) 15:46:51 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000100), 0x200, 0x549002) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000040)={'wlan1\x00'}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r2, 0x4008af7c, &(0x7f0000000140)={0x1, 0xfffffff8}) 15:46:51 executing program 2: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x3e}) 15:46:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x7, 0x0, '\x00', 0x1}) 15:46:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], &(0x7f00000001c0)=[{}], 0x7, 0x0, '\x00', 0x1, 0x1}) 15:46:51 executing program 0: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) 15:46:51 executing program 2: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:51 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000100), 0x200, 0x549002) (async) syz_open_dev$dri(&(0x7f0000000100), 0x200, 0x549002) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8915, &(0x7f0000000040)={'wlan1\x00'}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r2, 0x4008af7c, &(0x7f0000000140)={0x1, 0xfffffff8}) 15:46:51 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0x242000) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20008}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000bf042cffd0ca2d10f42b0000", @ANYRES16=r2, @ANYBLOB="080f2abd7000fbdbdf250000000008000c00020100000000000000000000140009200000070c018e384d75cc2452056c5cba0b27f2a31b5bcfe3765175e49cf396c8bb4bba7305183707606f8a91c4885b6127dfca5a"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r5, 0x8008af73, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000180)=0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) 15:46:51 executing program 0: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) 15:46:51 executing program 3: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x7, 0x0, '\x00', 0x1}) 15:46:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], &(0x7f00000001c0), 0x7, 0x0, '\x00', 0x1}) 15:46:51 executing program 2: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x806, 0x7852}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000040)={0xe953, 0x8, 0x7, 0xffff, 0x14, 0x7}) socket(0x28, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8906, 0x0) 15:46:51 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 15:46:51 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) 15:46:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], &(0x7f00000001c0), 0x7, 0x0, '\x00', 0x1}) 15:46:52 executing program 3: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x7, 0x0, '\x00', 0x1}) 15:46:52 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5421, &(0x7f00000000c0)={'wlan1\x00'}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000001c0)="550b2585ec87744d9d5bba8e85d30ddc304efad30a0fbc5ffbb34792b7f95503000000eb99366ce79a8eaf17547bd9a992b4f98d492459b20a3a7a1b9022de6bbad1f5eaac22045d2f986539f730cf51b11e45c362fb5323659ce92e17389a8bd120af658b00360400000027dae1e806888202901bf73f08494def40421e0a6d16cc36abfb16db5df22f82f20805c4720d", 0x91}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x4000000000000000, 0x301400) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000140)={r3}) 15:46:52 executing program 2: ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:52 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 15:46:52 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) 15:46:52 executing program 3: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x7, 0x0, '\x00', 0x1}) 15:46:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], &(0x7f00000001c0), 0x7, 0x0, '\x00', 0x1}) 15:46:52 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan1\x00'}) 15:46:52 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 15:46:52 executing program 2: ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:52 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) 15:46:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], &(0x7f00000001c0)=[{}], 0x0, 0x0, '\x00', 0x1, 0x1}) 15:46:52 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x7, 0x0, '\x00', 0x1}) 15:46:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x14d503) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x2}) 15:46:52 executing program 2: ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) 15:46:52 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000c80)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000cc0)={0xfffffffe, 0xd48, 0x10001}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x0, 0x2d}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$media(&(0x7f0000000240), 0x7, 0x400) r4 = syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f00000001c0)) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000d00)) ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f0000000dc0)) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000b00)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {0x80000000}], 0xa, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000b80)={r5}) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], &(0x7f00000001c0)=[{}], 0x0, 0x0, '\x00', 0x1, 0x1}) 15:46:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], &(0x7f00000001c0)=[{}], 0x0, 0x0, '\x00', 0x1, 0x1}) 15:46:52 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x7, 0x0, '\x00', 0x1}) 15:46:52 executing program 2: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) 15:46:52 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000c80)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000cc0)={0xfffffffe, 0xd48, 0x10001}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x0, 0x2d}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$media(&(0x7f0000000240), 0x7, 0x400) r4 = syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f00000001c0)) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000d00)) ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f0000000dc0)) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000b00)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {0x80000000}], 0xa, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000b80)={r5}) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], &(0x7f00000001c0)=[{}], 0x0, 0x0, '\x00', 0x1, 0x1}) 15:46:52 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89b1, &(0x7f0000000040)={'wlan0\x00'}) 15:46:52 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x7, 0x0, '\x00', 0x1}) 15:46:52 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000c80)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000cc0)={0xfffffffe, 0xd48, 0x10001}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x0, 0x2d}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$media(&(0x7f0000000240), 0x7, 0x400) r4 = syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f00000001c0)) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000d00)) ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f0000000dc0)) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000b00)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {0x80000000}], 0xa, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000b80)={r5}) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x11}) 15:46:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) 15:46:52 executing program 2: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:52 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a1, &(0x7f0000000040)={'wlan0\x00'}) 15:46:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x7, 0x0, '\x00', 0x1}) 15:46:52 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89b1, &(0x7f0000000040)={'wlan0\x00'}) 15:46:52 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) 15:46:52 executing program 2: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x7, 0x0, '\x00', 0x1}) 15:46:53 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x7, 0x0, '\x00', 0x1}) 15:46:53 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000c80)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000cc0)={0xfffffffe, 0xd48, 0x10001}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x0, 0x2d}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$media(&(0x7f0000000240), 0x7, 0x400) r3 = syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f00000001c0)) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000d00)) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000dc0)) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000b00)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {0x80000000}], 0xa, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000b80)={r4}) 15:46:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) 15:46:53 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) 15:46:53 executing program 2: syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:53 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000c80)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000cc0)={0xfffffffe, 0xd48, 0x10001}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x0, 0x2d}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$media(&(0x7f0000000240), 0x7, 0x400) r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000001c0)) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000d00)) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000dc0)) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000b00)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}]}) 15:46:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) 15:46:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x7, 0x0, '\x00', 0x1}) 15:46:53 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x7, 0x0, '\x00', 0x1}) 15:46:53 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x7, 0x0, '\x00', 0x0, 0x3}) 15:46:53 executing program 2: syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:53 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x7, 0x0, '\x00', 0x1}) 15:46:53 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000c80)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000cc0)={0xfffffffe, 0xd48, 0x10001}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x0, 0x2d}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$media(&(0x7f0000000240), 0x7, 0x400) r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000001c0)) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000d00)) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000dc0)) 15:46:53 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000c80)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000cc0)={0xfffffffe, 0xd48, 0x10001}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x0, 0x2d}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$media(&(0x7f0000000240), 0x7, 0x400) r3 = syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f00000001c0)) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000d00)) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000dc0)) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000b00)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {0x80000000}], 0xa, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000b80)={r4}) 15:46:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) 15:46:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 15:46:53 executing program 2: syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:53 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x7, 0x0, '\x00', 0x1}) 15:46:53 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000c80)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000cc0)={0xfffffffe, 0xd48, 0x10001}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x0, 0x2d}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$media(&(0x7f0000000240), 0x7, 0x400) r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000001c0)) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000dc0)) 15:46:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:53 executing program 5: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x6, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 15:46:53 executing program 2: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0) 15:46:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:46:53 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x7, 0x0, '\x00', 0x1}) 15:46:53 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000c80)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000cc0)={0xfffffffe, 0xd48, 0x10001}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x0, 0x2d}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$media(&(0x7f0000000240), 0x7, 0x400) r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000dc0)) 15:46:53 executing program 5: sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0400295f04bd7000fbdbdf256d004440de44", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x810) r0 = socket(0x15, 0x808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0xd4250fefc1fe856b, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r2, 0x2, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x70}}, 0x4084) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f00000001c0)={r4}) 15:46:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 15:46:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:46:53 executing program 2: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0) 15:46:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 15:46:53 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000c80)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000cc0)={0xfffffffe, 0xd48, 0x10001}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x0, 0x2d}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$media(&(0x7f0000000240), 0x7, 0x400) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000dc0)) 15:46:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, 0x0, 0x7}) 15:46:54 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f0000000040)={'wlan0\x00'}) 15:46:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:46:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 15:46:54 executing program 2: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0) 15:46:54 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000c80)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000cc0)={0xfffffffe, 0xd48, 0x10001}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x0, 0x2d}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$media(&(0x7f0000000240), 0x7, 0x400) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000dc0)) 15:46:54 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8932, &(0x7f0000000040)={'wlan0\x00'}) 15:46:54 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r0}) 15:46:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, 0x0, 0x7}) 15:46:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 15:46:54 executing program 2: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x0, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:54 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000c80)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000cc0)={0xfffffffe, 0xd48, 0x10001}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x0, 0x2d}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$media(&(0x7f0000000240), 0x7, 0x400) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000dc0)) 15:46:54 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000c80)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000cc0)={0xfffffffe, 0xd48, 0x10001}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x0, 0x2d}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$media(&(0x7f0000000240), 0x7, 0x400) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000dc0)) 15:46:54 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r0}) 15:46:54 executing program 2: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x0, [0xc]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, 0x0, 0x7}) 15:46:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, 0x0, 0x7}) 15:46:54 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000c80)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000cc0)={0xfffffffe, 0xd48, 0x10001}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x0, 0x2d}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000dc0)) 15:46:54 executing program 2: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:54 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r0}) 15:46:54 executing program 5: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x0, [0xc]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}, {}], 0x7, 0x0, '\x00', 0x0, 0x2}) 15:46:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, 0x0, 0x7}) 15:46:54 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000c80)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000cc0)={0xfffffffe, 0xd48, 0x10001}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x0, 0x2d}) r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000dc0)) 15:46:54 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:54 executing program 2: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{}, {0x80000000, 0x0, 0x0, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:54 executing program 5: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x0, [0xc, 0x9]}, {0x80000000, 0x0, 0x6, [0x1000, 0x6]}, 0x4, [0x1000, 0x20]}) 15:46:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, 0x0, 0x7}) 15:46:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}], 0x7, 0x0, '\x00', 0x0, 0x1}) 15:46:54 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000c80)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000cc0)={0xfffffffe, 0xd48, 0x10001}) r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000dc0)) 15:46:54 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:54 executing program 2: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{}, {0x80000000, 0x0, 0x0, [0x1000]}, 0x4, [0x1000, 0x20]}) 15:46:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)='U', 0x1}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x4], 0x1, 0x800}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffff, 0x24000) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000100)={r3, 0x1c}) 15:46:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0), 0x7}) 15:46:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100), 0x0, 0x7}) 15:46:54 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000c80)={0x0, 0x80000}) r1 = syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000dc0)) 15:46:55 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:55 executing program 2: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{}, {}, 0x4, [0x1000, 0x20]}) 15:46:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) 15:46:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100), 0x0, 0x7}) 15:46:55 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) r0 = syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000dc0)) 15:46:55 executing program 2: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{}, {}, 0x0, [0x1000, 0x20]}) 15:46:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0), 0x7}) 15:46:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) 15:46:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100), 0x0, 0x7}) 15:46:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:55 executing program 2: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{}, {}, 0x0, [0x1000, 0x20]}) 15:46:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0), 0x7}) 15:46:55 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000dc0)) 15:46:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) 15:46:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, '\x00', 0x1}) 15:46:55 executing program 2: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{}, {}, 0x0, [0x1000]}) 15:46:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}], 0x0, 0x0, '\x00', 0x0, 0x1}) 15:46:55 executing program 4: r0 = syz_open_dev$rtc(0x0, 0x0, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000dc0)) 15:46:55 executing program 5: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x13}) 15:46:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, '\x00', 0x1}) 15:46:55 executing program 2: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)) 15:46:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}], 0x0, 0x0, '\x00', 0x0, 0x1}) 15:46:55 executing program 5: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x13}) 15:46:55 executing program 4: r0 = syz_open_dev$rtc(0x0, 0x0, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000dc0)) 15:46:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, '\x00', 0x1}) 15:46:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[{}], 0x0, 0x0, '\x00', 0x0, 0x1}) 15:46:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:55 executing program 5: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x13}) 15:46:55 executing program 4: r0 = syz_open_dev$rtc(0x0, 0x0, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000dc0)) 15:46:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:55 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) 15:46:55 executing program 4: syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000dc0)) 15:46:56 executing program 0: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{}, {}, 0x0, [0x1000]}) 15:46:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:46:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:56 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) 15:46:56 executing program 4: syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000dc0)) 15:46:56 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0045878, 0x0) 15:46:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x10}) 15:46:56 executing program 4: syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000dc0)) 15:46:56 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) 15:46:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) 15:46:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:46:56 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, 0x0) 15:46:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) 15:46:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:46:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x10}) 15:46:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) 15:46:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:46:57 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4020940d, 0x0) 15:46:57 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x13}) 15:46:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x10}) 15:46:57 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x13}) 15:46:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:46:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) 15:46:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) 15:46:57 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x13}) 15:46:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:46:58 executing program 2: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x10}) 15:46:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) 15:46:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:58 executing program 0: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x9}) 15:46:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:46:58 executing program 0: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x9}) 15:46:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) 15:46:58 executing program 2: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x10}) 15:46:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:46:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:58 executing program 0: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x9}) 15:46:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:46:59 executing program 3: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:46:59 executing program 4: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x8}) 15:46:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:59 executing program 2: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x10}) 15:46:59 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) 15:46:59 executing program 3: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:46:59 executing program 4: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x8}) 15:46:59 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) 15:46:59 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x10}) 15:46:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:46:59 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) 15:46:59 executing program 4: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x8}) 15:46:59 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x10}) 15:46:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:46:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) 15:46:59 executing program 3: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:46:59 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) 15:46:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:59 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x10}) 15:46:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:46:59 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:46:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) 15:46:59 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) 15:46:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x10}) 15:46:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:59 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:46:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x7}) 15:46:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) 15:46:59 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) 15:46:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:59 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x9}) 15:46:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x10}) 15:46:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) 15:46:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x7}) 15:46:59 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:46:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:59 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x9}) 15:46:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) 15:46:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:46:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x10}) 15:46:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x7}) 15:46:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 15:46:59 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x9}) 15:47:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) 15:47:00 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x10}) 15:47:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 15:47:00 executing program 5: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x7}) 15:47:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:00 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x8}) 15:47:00 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x10}) 15:47:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:00 executing program 5: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x7}) 15:47:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 15:47:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:00 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x8}) 15:47:00 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x10}) 15:47:00 executing program 5: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x7}) 15:47:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 15:47:00 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x8}) 15:47:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:00 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:00 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x7}) 15:47:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 15:47:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:00 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:00 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x7}) 15:47:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 15:47:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:00 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:00 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x7}) 15:47:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) 15:47:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:47:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x7}) 15:47:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 15:47:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:47:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) 15:47:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x7}) 15:47:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:47:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) 15:47:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0xcdf9, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:47:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x7}) 15:47:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) 15:47:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={0x0}) 15:47:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:00 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a0, 0x0) 15:47:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:00 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x7}) 15:47:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={0x0}) 15:47:00 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8982, 0x0) 15:47:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:00 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8916, 0x0) 15:47:00 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x7}) 15:47:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:00 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5451, &(0x7f0000000040)={'wlan0\x00'}) 15:47:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:00 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x20000102) 15:47:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={0x0}) 15:47:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:00 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x7}) 15:47:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={0x0}) 15:47:00 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x20000102) 15:47:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)}) 15:47:00 executing program 0: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:01 executing program 2: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:01 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x20000102) 15:47:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)}) 15:47:01 executing program 0: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:01 executing program 4: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x36}, 0x20000102) 15:47:01 executing program 2: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)}) 15:47:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:01 executing program 0: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:01 executing program 4: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x36}, 0x20000102) 15:47:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:01 executing program 2: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (fail_nth: 1) 15:47:01 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:01 executing program 4: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x36}, 0x20000102) 15:47:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)) 15:47:01 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:01 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) [ 1690.157427] FAULT_INJECTION: forcing a failure. [ 1690.157427] name failslab, interval 1, probability 0, space 0, times 0 15:47:01 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x20000102) 15:47:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)) 15:47:01 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) [ 1690.208972] CPU: 0 PID: 9198 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 1690.216814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1690.226171] Call Trace: [ 1690.228770] dump_stack+0x1fc/0x2ef [ 1690.232418] should_fail.cold+0xa/0xf [ 1690.236234] ? setup_fault_attr+0x200/0x200 [ 1690.240576] ? lock_acquire+0x170/0x3c0 [ 1690.244570] __should_failslab+0x115/0x180 [ 1690.248822] should_failslab+0x5/0x10 [ 1690.252626] kmem_cache_alloc_node_trace+0x244/0x3b0 15:47:01 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x20000102) 15:47:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)) [ 1690.257739] __get_vm_area_node+0x128/0x3a0 [ 1690.262063] ? mark_held_locks+0xf0/0xf0 [ 1690.266135] __vmalloc_node_flags_caller+0xf4/0x1b0 [ 1690.271159] ? drm_property_create_blob.part.0+0x2f/0x310 [ 1690.276707] ? drm_property_create_blob.part.0+0x2f/0x310 [ 1690.282266] kvmalloc_node+0xd3/0xf0 [ 1690.286001] drm_property_create_blob.part.0+0x2f/0x310 [ 1690.291375] drm_mode_createblob_ioctl+0x103/0x420 [ 1690.296325] drm_ioctl_kernel+0x208/0x2a0 [ 1690.300480] ? drm_mode_getblob_ioctl+0x280/0x280 [ 1690.305352] ? drm_ioctl_permit+0x210/0x210 [ 1690.309685] ? __might_fault+0x192/0x1d0 [ 1690.313763] drm_ioctl+0x5a0/0x9e0 [ 1690.317322] ? drm_mode_getblob_ioctl+0x280/0x280 [ 1690.322173] ? drm_getstats+0x20/0x20 [ 1690.325980] ? get_pid_task+0xf4/0x190 [ 1690.329875] ? proc_fail_nth_write+0x95/0x1d0 [ 1690.334375] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1690.339310] ? __fdget_pos+0x26f/0x310 [ 1690.343219] ? ksys_write+0x241/0x2a0 [ 1690.347036] ? drm_getstats+0x20/0x20 [ 1690.350846] do_vfs_ioctl+0xcdb/0x12e0 [ 1690.354740] ? lock_downgrade+0x720/0x720 [ 1690.358988] ? check_preemption_disabled+0x41/0x280 [ 1690.364006] ? ioctl_preallocate+0x200/0x200 [ 1690.368435] ? __fget+0x356/0x510 [ 1690.371897] ? do_dup2+0x450/0x450 [ 1690.375449] ? vfs_write+0x393/0x540 [ 1690.379169] ? fput+0x2b/0x190 [ 1690.382378] ksys_ioctl+0x9b/0xc0 [ 1690.385846] __x64_sys_ioctl+0x6f/0xb0 [ 1690.389741] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1690.394334] do_syscall_64+0xf9/0x620 [ 1690.398147] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1690.403336] RIP: 0033:0x7f26422760f9 [ 1690.407051] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1690.425956] RSP: 002b:00007f26407e8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1690.433670] RAX: ffffffffffffffda RBX: 00007f2642395f80 RCX: 00007f26422760f9 [ 1690.440945] RDX: 0000000020000100 RSI: 00000000c01064bd RDI: 0000000000000003 [ 1690.448217] RBP: 00007f26407e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1690.455490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1690.462770] R13: 00007ffcd5eec99f R14: 00007f26407e8300 R15: 0000000000022000 [ 1690.495410] syz-executor.3: vmalloc: allocation failure: 536871129 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1690.507834] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1690.513080] CPU: 0 PID: 9198 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 1690.520875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1690.530227] Call Trace: [ 1690.532826] dump_stack+0x1fc/0x2ef [ 1690.536464] warn_alloc.cold+0x7b/0x18f [ 1690.540451] ? zone_watermark_ok_safe+0x260/0x260 [ 1690.545304] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 1690.550585] ? __get_vm_area_node+0x2e2/0x3a0 [ 1690.555094] __vmalloc_node_flags_caller+0x164/0x1b0 [ 1690.560203] ? drm_property_create_blob.part.0+0x2f/0x310 [ 1690.565741] kvmalloc_node+0xd3/0xf0 [ 1690.569447] drm_property_create_blob.part.0+0x2f/0x310 [ 1690.574797] drm_mode_createblob_ioctl+0x103/0x420 [ 1690.579720] drm_ioctl_kernel+0x208/0x2a0 [ 1690.583885] ? drm_mode_getblob_ioctl+0x280/0x280 [ 1690.588718] ? drm_ioctl_permit+0x210/0x210 [ 1690.593058] ? __might_fault+0x192/0x1d0 [ 1690.597121] drm_ioctl+0x5a0/0x9e0 [ 1690.600658] ? drm_mode_getblob_ioctl+0x280/0x280 [ 1690.605482] ? drm_getstats+0x20/0x20 [ 1690.609267] ? get_pid_task+0xf4/0x190 [ 1690.613137] ? proc_fail_nth_write+0x95/0x1d0 [ 1690.617623] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1690.622542] ? __fdget_pos+0x26f/0x310 [ 1690.626428] ? ksys_write+0x241/0x2a0 [ 1690.630219] ? drm_getstats+0x20/0x20 [ 1690.634004] do_vfs_ioctl+0xcdb/0x12e0 [ 1690.637894] ? lock_downgrade+0x720/0x720 [ 1690.642042] ? check_preemption_disabled+0x41/0x280 [ 1690.647228] ? ioctl_preallocate+0x200/0x200 [ 1690.651635] ? __fget+0x356/0x510 [ 1690.655074] ? do_dup2+0x450/0x450 [ 1690.658601] ? vfs_write+0x393/0x540 [ 1690.662309] ? fput+0x2b/0x190 [ 1690.665491] ksys_ioctl+0x9b/0xc0 [ 1690.668930] __x64_sys_ioctl+0x6f/0xb0 [ 1690.672805] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1690.677382] do_syscall_64+0xf9/0x620 [ 1690.681180] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1690.686361] RIP: 0033:0x7f26422760f9 [ 1690.690132] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1690.709717] RSP: 002b:00007f26407e8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1690.717524] RAX: ffffffffffffffda RBX: 00007f2642395f80 RCX: 00007f26422760f9 [ 1690.724817] RDX: 0000000020000100 RSI: 00000000c01064bd RDI: 0000000000000003 [ 1690.732088] RBP: 00007f26407e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1690.739341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1690.746699] R13: 00007ffcd5eec99f R14: 00007f26407e8300 R15: 0000000000022000 [ 1690.763065] Mem-Info: [ 1690.765587] active_anon:22621 inactive_anon:4755 isolated_anon:0 [ 1690.765587] active_file:5687 inactive_file:12241 isolated_file:0 [ 1690.765587] unevictable:0 dirty:54 writeback:0 unstable:0 [ 1690.765587] slab_reclaimable:26561 slab_unreclaimable:125658 [ 1690.765587] mapped:31349 shmem:5111 pagetables:606 bounce:0 [ 1690.765587] free:1464705 free_pcp:626 free_cma:0 [ 1690.801065] Node 0 active_anon:90484kB inactive_anon:19020kB active_file:22632kB inactive_file:48964kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125396kB dirty:212kB writeback:0kB shmem:20444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 24576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1690.830944] Node 1 active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1690.857700] Node 0 DMA free:15908kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1690.884668] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1690.889795] Node 0 DMA32 free:1802388kB min:35996kB low:44992kB high:53988kB active_anon:90460kB inactive_anon:19016kB active_file:22632kB inactive_file:48964kB unevictable:0kB writepending:212kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2352kB bounce:0kB free_pcp:2740kB local_pcp:1396kB free_cma:0kB [ 1690.919843] lowmem_reserve[]: 0 0 1 1 1 [ 1690.923823] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1690.949885] lowmem_reserve[]: 0 0 0 0 0 [ 1690.953863] Node 1 Normal free:4039240kB min:53876kB low:67344kB high:80812kB active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1690.982141] lowmem_reserve[]: 0 0 0 0 0 [ 1690.986287] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 1691.000064] Node 0 DMA32: 3022*4kB (UME) 3496*8kB (UME) 2764*16kB (UME) 1902*32kB (UME) 1335*64kB (UME) 769*128kB (UM) 141*256kB (U) 132*512kB (U) 59*1024kB (UM) 17*2048kB (U) 311*4096kB (UM) = 1801784kB [ 1691.018457] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1691.029760] Node 1 Normal: 98*4kB (UE) 404*8kB (UME) 290*16kB (UME) 78*32kB (UME) 23*64kB (UM) 15*128kB (UME) 9*256kB (UM) 5*512kB (UM) 4*1024kB (UME) 1*2048kB (U) 980*4096kB (M) = 4039240kB [ 1691.047044] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1691.055953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1691.064527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1691.073438] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1691.082250] 23038 total pagecache pages [ 1691.086843] 0 pages in swap cache [ 1691.090312] Swap cache stats: add 0, delete 0, find 0/0 [ 1691.095663] Free swap = 0kB [ 1691.098896] Total swap = 0kB [ 1691.102076] 2097051 pages RAM [ 1691.105162] 0 pages HighMem/MovableOnly [ 1691.109214] 369649 pages reserved 15:47:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:02 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x20000102) 15:47:02 executing program 1: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={r0}) 15:47:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:02 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:02 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) [ 1691.112661] 0 pages cma reserved 15:47:02 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x20000102) 15:47:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:02 executing program 1: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={r0}) 15:47:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:02 executing program 1: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={r0}) 15:47:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0x2, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:03 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:03 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x20000102) 15:47:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:03 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:03 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x20000102) 15:47:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:03 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x20000102) 15:47:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0x5421, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:03 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:03 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x36}, 0x20000102) 15:47:03 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0x5450, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:03 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:03 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x36}, 0x20000102) 15:47:03 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:03 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:03 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x36}, 0x20000102) 15:47:03 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0x5451, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:03 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:03 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:03 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) 15:47:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0x5452, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:03 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) 15:47:03 executing program 5: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0x5460, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:03 executing program 5: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:03 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) 15:47:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:03 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:03 executing program 5: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0x5421, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0x40049409, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:03 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0x4020940d, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:03 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x36}, 0x20000102) 15:47:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:04 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (fail_nth: 1) 15:47:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)) 15:47:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:04 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:04 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc0045878, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (fail_nth: 1) 15:47:04 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x0}, 0x20000102) 15:47:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)) 15:47:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc0045878, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:04 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064c9, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:04 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x40000202) 15:47:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (fail_nth: 1) 15:47:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x2, &(0x7f0000000000)={0x5}) 15:47:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc0189436, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)) 15:47:04 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x5421, &(0x7f0000000000)={0x5}) 15:47:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc020660b, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:04 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000001c0)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x1, 0x4, 0x80000000, 0x2], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000180)) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000140), 0x2) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) 15:47:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x5450, &(0x7f0000000000)={0x5}) 15:47:04 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="01", 0x20000081}) 15:47:04 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000001c0)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x1, 0x4, 0x80000000, 0x2], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000180)) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000140), 0x2) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) 15:47:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x5451, &(0x7f0000000000)={0x5}) 15:47:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x2, &(0x7f0000000000)={0x3}) 15:47:04 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:04 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000001c0)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x1, 0x4, 0x80000000, 0x2], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000180)) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000140), 0x2) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000001c0)) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x1, 0x4, 0x80000000, 0x2], 0x4, 0x80000}) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000180)) (async) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000140), 0x2) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) (async) 15:47:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x5421, &(0x7f0000000000)={0x3}) 15:47:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x5452, &(0x7f0000000000)={0x5}) 15:47:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x12000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)='U', 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x80000001, 0x67, 0xb72c7a35, 0x1, 0x3, 0x200, 0xfffff64d], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/33) 15:47:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x5450, &(0x7f0000000000)={0x3}) 15:47:05 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300), 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x6, 0x0, [0x0, 0x0, 0x7ff, 0x8, 0x6, 0x7dec, 0xffffffff, 0x2, 0x1000, 0x9, 0x7, 0x9, 0x5, 0x6, 0x7, 0xfff]}], r3, 0x1, 0x1, 0x48}}, 0x20) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000)) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x400202, 0x0) 15:47:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x5460, &(0x7f0000000000)={0x5}) 15:47:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:05 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300), 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x6, 0x0, [0x0, 0x0, 0x7ff, 0x8, 0x6, 0x7dec, 0xffffffff, 0x2, 0x1000, 0x9, 0x7, 0x9, 0x5, 0x6, 0x7, 0xfff]}], r3, 0x1, 0x1, 0x48}}, 0x20) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000)) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x400202, 0x0) 15:47:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x5451, &(0x7f0000000000)={0x3}) 15:47:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x12000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)='U', 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x80000001, 0x67, 0xb72c7a35, 0x1, 0x3, 0x200, 0xfffff64d], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/33) 15:47:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x40049409, &(0x7f0000000000)={0x5}) 15:47:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 15:47:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x5452, &(0x7f0000000000)={0x3}) 15:47:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:05 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300), 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x6, 0x0, [0x0, 0x0, 0x7ff, 0x8, 0x6, 0x7dec, 0xffffffff, 0x2, 0x1000, 0x9, 0x7, 0x9, 0x5, 0x6, 0x7, 0xfff]}], r3, 0x1, 0x1, 0x48}}, 0x20) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000)) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x400202, 0x0) 15:47:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x5}) 15:47:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x12000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)='U', 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x80000001, 0x67, 0xb72c7a35, 0x1, 0x3, 0x200, 0xfffff64d], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/33) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x12000) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)='U', 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x80000001, 0x67, 0xb72c7a35, 0x1, 0x3, 0x200, 0xfffff64d], 0x7, 0x80800}) (async) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/33) (async) 15:47:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x5460, &(0x7f0000000000)={0x3}) 15:47:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc0045878, &(0x7f0000000000)={0x5}) 15:47:05 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x4a0000) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000140)) 15:47:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x40a003, 0x0) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)) 15:47:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc0045878, &(0x7f0000000000)={0x5}) 15:47:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x40049409, &(0x7f0000000000)={0x3}) 15:47:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={r1}) 15:47:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 15:47:06 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x4a0000) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000140)) 15:47:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc01064c9, &(0x7f0000000000)={0x5}) 15:47:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, 0x0) 15:47:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (fail_nth: 1) 15:47:06 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x4a0000) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000140)) 15:47:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc0189436, &(0x7f0000000000)={0x5}) 15:47:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x40a003, 0x0) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)) 15:47:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, 0x0) 15:47:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc0045878, &(0x7f0000000000)={0x3}) 15:47:07 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000140)) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:47:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc020660b, &(0x7f0000000000)={0x5}) 15:47:07 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000140)) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000140)) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) 15:47:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, 0x0) 15:47:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x2, &(0x7f0000000000)={0x5}) 15:47:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x6}) 15:47:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc0045878, &(0x7f0000000000)={0x3}) 15:47:07 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async, rerun: 32) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) (rerun: 32) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000140)) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:47:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x40a003, 0x0) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)) 15:47:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)) 15:47:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x5421, &(0x7f0000000000)={0x5}) 15:47:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc01064c9, &(0x7f0000000000)={0x3}) 15:47:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) 15:47:08 executing program 4: ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000140)=""/11) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000000)={0x0, 0xaf, ""/175}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)={0x3, 0x3, 0x4, 0x3, 0x1, [0x5, 0x100000, 0x4, 0x7], [0x0, 0xfffffffa, 0x70, 0xc2b], [0x6, 0x2, 0xb38, 0x5], [0xfff, 0x1, 0x3, 0x7]}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x5450, &(0x7f0000000000)={0x5}) 15:47:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc0189436, &(0x7f0000000000)={0x3}) 15:47:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)) 15:47:08 executing program 4: ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000140)=""/11) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000000)={0x0, 0xaf, ""/175}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)={0x3, 0x3, 0x4, 0x3, 0x1, [0x5, 0x100000, 0x4, 0x7], [0x0, 0xfffffffa, 0x70, 0xc2b], [0x6, 0x2, 0xb38, 0x5], [0xfff, 0x1, 0x3, 0x7]}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5, 0xfdfdffff}) 15:47:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x5451, &(0x7f0000000000)={0x5}) 15:47:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="378761c0fcb0bd0000", 0x9}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x600500, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000240)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x400840) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x4, 0x0, 0x81}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000000c0)={r4, &(0x7f00000001c0)=""/67}) 15:47:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc020660b, &(0x7f0000000000)={0x3}) 15:47:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x4020940d, &(0x7f00000001c0)) 15:47:09 executing program 4: ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000140)=""/11) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000000)={0x0, 0xaf, ""/175}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)={0x3, 0x3, 0x4, 0x3, 0x1, [0x5, 0x100000, 0x4, 0x7], [0x0, 0xfffffffa, 0x70, 0xc2b], [0x6, 0x2, 0xb38, 0x5], [0xfff, 0x1, 0x3, 0x7]}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000140)=""/11) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000000)={0x0, 0xaf, ""/175}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)={0x3, 0x3, 0x4, 0x3, 0x1, [0x5, 0x100000, 0x4, 0x7], [0x0, 0xfffffffa, 0x70, 0xc2b], [0x6, 0x2, 0xb38, 0x5], [0xfff, 0x1, 0x3, 0x7]}) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) 15:47:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5, 0xfffffdfd}) 15:47:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x5452, &(0x7f0000000000)={0x5}) 15:47:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5, 0xfdfdffff00000000}) 15:47:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x40a003, 0x0) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)) 15:47:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x5460, &(0x7f0000000000)={0x5}) 15:47:09 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x2, 0x8000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000040)={0x0, 0x3, 0x0, &(0x7f0000000140)=[{}, {}, {}], 0x4, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000440)=[{}, {}, {}, {0x0, 0x80000000}, {}, {}], 0x9, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000680)={r2}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="378761c0fcb0bd0000", 0x9}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x600500, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000240)) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x400840) (async, rerun: 32) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x4, 0x0, 0x81}) (async, rerun: 32) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) (rerun: 32) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000000c0)={r4, &(0x7f00000001c0)=""/67}) 15:47:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x2}) 15:47:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x40049409, &(0x7f0000000000)={0x5}) 15:47:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) r1 = socket(0x3, 0x4, 0x9) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:09 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x2, 0x8000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000040)={0x0, 0x3, 0x0, &(0x7f0000000140)=[{}, {}, {}], 0x4, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000440)=[{}, {}, {}, {0x0, 0x80000000}, {}, {}], 0x9, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000680)={r2}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000680)={r2}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="378761c0fcb0bd0000", 0x9}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x600500, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000240)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x400840) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x4, 0x0, 0x81}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000000c0)={r4, &(0x7f00000001c0)=""/67}) 15:47:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x4}) 15:47:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x5}) 15:47:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) (async) r1 = socket(0x3, 0x4, 0x9) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x236e82) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000001c0)=""/4096) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f00000012c0)="91f1b6a0912a29a0f5667f5c0bb369732fe28c51c171fcfac4d9836b87db93262bd5bafb8357e24caaefea4f9fdc6f427998e2f92521c8595173965abbb552ecd9147ed3703cf54be3bd28029ad291bb8347a02b8c0a39f2be899b5df14ce6e7f972f73461df557c69c37ba39847bf277b8db111a94e2940160d616dc0316bb5220abb6c32aa51bd04348e5212a3907b25866d1fdc9cf0ad6a676e370ed1fa7199aac38fd3bca822d2861252171e43883b697fcf3274a01db1a3044bf414b6902e3f7227d01605f249fc4fcc8a174c45c76a5e96f67e7749704998280fb3f8ba", 0xe0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0xd4000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) 15:47:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:10 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x2, 0x8000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000040)={0x0, 0x3, 0x0, &(0x7f0000000140)=[{}, {}, {}], 0x4, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000440)=[{}, {}, {}, {0x0, 0x80000000}, {}, {}], 0x9, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000680)={r2}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc0045878, &(0x7f0000000000)={0x5}) 15:47:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) socket(0x3, 0x4, 0x9) (async) r1 = socket(0x3, 0x4, 0x9) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x236e82) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000001c0)=""/4096) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f00000012c0)="91f1b6a0912a29a0f5667f5c0bb369732fe28c51c171fcfac4d9836b87db93262bd5bafb8357e24caaefea4f9fdc6f427998e2f92521c8595173965abbb552ecd9147ed3703cf54be3bd28029ad291bb8347a02b8c0a39f2be899b5df14ce6e7f972f73461df557c69c37ba39847bf277b8db111a94e2940160d616dc0316bb5220abb6c32aa51bd04348e5212a3907b25866d1fdc9cf0ad6a676e370ed1fa7199aac38fd3bca822d2861252171e43883b697fcf3274a01db1a3044bf414b6902e3f7227d01605f249fc4fcc8a174c45c76a5e96f67e7749704998280fb3f8ba", 0xe0}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0xd4000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) 15:47:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc0045878, &(0x7f0000000000)={0x5}) 15:47:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000000c0)={0x47, &(0x7f0000000040)="c80b71abbe8e5d6febacb8a877e4edf1dfba5428b494d1604e8967745686ba30d7eb35518d1d2f16dfcc66ca9e7bbf8202790b47e0e483a592a275cebd6799dcc60b5b2811e710"}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000100)={0xffffffffffff28a0}) 15:47:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x6}) 15:47:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:10 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) 15:47:10 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) 15:47:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc01064c9, &(0x7f0000000000)={0x5}) 15:47:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x236e82) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000001c0)=""/4096) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f00000012c0)="91f1b6a0912a29a0f5667f5c0bb369732fe28c51c171fcfac4d9836b87db93262bd5bafb8357e24caaefea4f9fdc6f427998e2f92521c8595173965abbb552ecd9147ed3703cf54be3bd28029ad291bb8347a02b8c0a39f2be899b5df14ce6e7f972f73461df557c69c37ba39847bf277b8db111a94e2940160d616dc0316bb5220abb6c32aa51bd04348e5212a3907b25866d1fdc9cf0ad6a676e370ed1fa7199aac38fd3bca822d2861252171e43883b697fcf3274a01db1a3044bf414b6902e3f7227d01605f249fc4fcc8a174c45c76a5e96f67e7749704998280fb3f8ba", 0xe0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0xd4000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x236e82) (async) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000001c0)=""/4096) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f00000012c0)="91f1b6a0912a29a0f5667f5c0bb369732fe28c51c171fcfac4d9836b87db93262bd5bafb8357e24caaefea4f9fdc6f427998e2f92521c8595173965abbb552ecd9147ed3703cf54be3bd28029ad291bb8347a02b8c0a39f2be899b5df14ce6e7f972f73461df557c69c37ba39847bf277b8db111a94e2940160d616dc0316bb5220abb6c32aa51bd04348e5212a3907b25866d1fdc9cf0ad6a676e370ed1fa7199aac38fd3bca822d2861252171e43883b697fcf3274a01db1a3044bf414b6902e3f7227d01605f249fc4fcc8a174c45c76a5e96f67e7749704998280fb3f8ba", 0xe0}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0xd4000) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) (async) 15:47:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x7}) 15:47:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000000c0)={0x47, &(0x7f0000000040)="c80b71abbe8e5d6febacb8a877e4edf1dfba5428b494d1604e8967745686ba30d7eb35518d1d2f16dfcc66ca9e7bbf8202790b47e0e483a592a275cebd6799dcc60b5b2811e710"}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000100)={0xffffffffffff28a0}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000000c0)={0x47, &(0x7f0000000040)="c80b71abbe8e5d6febacb8a877e4edf1dfba5428b494d1604e8967745686ba30d7eb35518d1d2f16dfcc66ca9e7bbf8202790b47e0e483a592a275cebd6799dcc60b5b2811e710"}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) (async) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000100)={0xffffffffffff28a0}) (async) 15:47:10 executing program 1: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:10 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) 15:47:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) 15:47:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc0189436, &(0x7f0000000000)={0x5}) 15:47:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000040)) 15:47:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000000c0)={0x47, &(0x7f0000000040)="c80b71abbe8e5d6febacb8a877e4edf1dfba5428b494d1604e8967745686ba30d7eb35518d1d2f16dfcc66ca9e7bbf8202790b47e0e483a592a275cebd6799dcc60b5b2811e710"}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async, rerun: 32) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (rerun: 32) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) (async) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000100)={0xffffffffffff28a0}) 15:47:10 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4c400, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x480100, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x3}, 0x2) 15:47:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) 15:47:10 executing program 1: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc020660b, &(0x7f0000000000)={0x5}) 15:47:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0xff, 0x1, 0x4], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r2, 0x8004af79, &(0x7f0000000200)) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) ioctl$VHOST_VDPA_SET_STATUS(r1, 0x4001af72, &(0x7f0000000040)=0x1) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000240)) 15:47:11 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4c400, 0x0) (async) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x480100, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x3}, 0x2) 15:47:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x10}) 15:47:11 executing program 1: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x6}) 15:47:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0xff, 0x1, 0x4], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r2, 0x8004af79, &(0x7f0000000200)) (async, rerun: 32) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) (async, rerun: 32) ioctl$VHOST_VDPA_SET_STATUS(r1, 0x4001af72, &(0x7f0000000040)=0x1) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000240)) 15:47:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000040)) (async) 15:47:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x11}) 15:47:11 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:11 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4c400, 0x0) (async) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x480100, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x3}, 0x2) 15:47:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) 15:47:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0xff, 0x1, 0x4], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r2, 0x8004af79, &(0x7f0000000200)) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) (async, rerun: 64) ioctl$VHOST_VDPA_SET_STATUS(r1, 0x4001af72, &(0x7f0000000040)=0x1) (rerun: 64) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) (async, rerun: 64) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000240)) (rerun: 64) 15:47:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x12}) 15:47:12 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700)={0xa, 0x0, [{0x5000, 0x9c, &(0x7f0000000140)=""/156}, {0x5000, 0x6a, &(0x7f0000000040)=""/106}, {0x2, 0x43, &(0x7f0000000200)=""/67}, {0x5000, 0xe1, &(0x7f0000000280)=""/225}, {0x2, 0x17, &(0x7f0000000380)=""/23}, {0x6000, 0x94, &(0x7f00000003c0)=""/148}, {0x10000, 0x0, &(0x7f0000000480)}, {0x100000, 0xe2, &(0x7f00000004c0)=""/226}, {0x100000, 0x8a, &(0x7f00000005c0)=""/138}, {0xd000, 0x48, &(0x7f0000000680)=""/72}]}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:12 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5, 0xfdfdffff}) 15:47:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r1, 0x1}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0x33}) 15:47:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async, rerun: 32) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) (rerun: 32) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r1, 0x1}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0x33}) 15:47:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000040)) (async) 15:47:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5, 0xfffffdfd}) 15:47:13 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) 15:47:13 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700)={0xa, 0x0, [{0x5000, 0x9c, &(0x7f0000000140)=""/156}, {0x5000, 0x6a, &(0x7f0000000040)=""/106}, {0x2, 0x43, &(0x7f0000000200)=""/67}, {0x5000, 0xe1, &(0x7f0000000280)=""/225}, {0x2, 0x17, &(0x7f0000000380)=""/23}, {0x6000, 0x94, &(0x7f00000003c0)=""/148}, {0x10000, 0x0, &(0x7f0000000480)}, {0x100000, 0xe2, &(0x7f00000004c0)=""/226}, {0x100000, 0x8a, &(0x7f00000005c0)=""/138}, {0xd000, 0x48, &(0x7f0000000680)=""/72}]}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r1, 0x1}) (async) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0x33}) 15:47:13 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700)={0xa, 0x0, [{0x5000, 0x9c, &(0x7f0000000140)=""/156}, {0x5000, 0x6a, &(0x7f0000000040)=""/106}, {0x2, 0x43, &(0x7f0000000200)=""/67}, {0x5000, 0xe1, &(0x7f0000000280)=""/225}, {0x2, 0x17, &(0x7f0000000380)=""/23}, {0x6000, 0x94, &(0x7f00000003c0)=""/148}, {0x10000, 0x0, &(0x7f0000000480)}, {0x100000, 0xe2, &(0x7f00000004c0)=""/226}, {0x100000, 0x8a, &(0x7f00000005c0)=""/138}, {0xd000, 0x48, &(0x7f0000000680)=""/72}]}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5, 0xfdfdffff00000000}) 15:47:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3, 0xfdfdffff}) 15:47:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) 15:47:15 executing program 3: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x9, 0x480301) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x8, 0x1, 0xb, 0x1, 0x3, 0x3, 0x1, 0x80, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x80002) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="55484125db107c0b8fa04d60d6181e3bdd45e2d4c4a787e8c165e105a1f670df0493b0c5ca80e0c0546c9497d32adef2239844da6550c53439", 0x39}) 15:47:15 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040), 0x2) 15:47:15 executing program 5: ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000080)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)={0x10001}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:15 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3, 0xfffffdfd}) 15:47:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3, 0xfdfdffff00000000}) 15:47:15 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:15 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040), 0x2) 15:47:15 executing program 3: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x9, 0x480301) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x8, 0x1, 0xb, 0x1, 0x3, 0x3, 0x1, 0x80, 0xffffffffffffffff}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x80002) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="55484125db107c0b8fa04d60d6181e3bdd45e2d4c4a787e8c165e105a1f670df0493b0c5ca80e0c0546c9497d32adef2239844da6550c53439", 0x39}) 15:47:15 executing program 5: ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000080)) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)={0x10001}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:15 executing program 0: getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f00000001c0)={0x9, 0x57, 0x4, 0x3, 0xfffffbff, 0x1, 0x9}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000180)={0x7, 0x6, {}, {r0}, 0x2, 0x8000}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x2, 0x5, {}, {r0}, 0x5f, 0x601}) r2 = syz_open_dev$dri(&(0x7f0000000140), 0xffffffffdffffffa, 0x2c102) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:15 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:15 executing program 5: ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000080)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)={0x10001}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000080)) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)={0x10001}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) 15:47:15 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040), 0x2) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040), 0x2) (async) 15:47:15 executing program 3: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x9, 0x480301) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x8, 0x1, 0xb, 0x1, 0x3, 0x3, 0x1, 0x80, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x80002) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="55484125db107c0b8fa04d60d6181e3bdd45e2d4c4a787e8c165e105a1f670df0493b0c5ca80e0c0546c9497d32adef2239844da6550c53439", 0x39}) 15:47:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000001c0)=[0x7a1a, 0x10001, 0xe91b, 0xfffffffa, 0xffffffff, 0x4, 0x80000000, 0x3ff, 0x5], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000140)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000180)={0x8000000000000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000080)={0x20000000, 0x20, 0x559}) 15:47:15 executing program 0: getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f00000001c0)={0x9, 0x57, 0x4, 0x3, 0xfffffbff, 0x1, 0x9}) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000180)={0x7, 0x6, {}, {r0}, 0x2, 0x8000}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x2, 0x5, {}, {r0}, 0x5f, 0x601}) (async) r2 = syz_open_dev$dri(&(0x7f0000000140), 0xffffffffdffffffa, 0x2c102) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:15 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000280)=""/4096) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x301040, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000000)={0x1, 0x4}, 0x2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x139b00, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000140)={0x2, 0xe8}, 0x2) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000001280)={0x0, 0x80, 0x6, 0x3, 0xd4, 0x0, 0x0, 0x6, 0x20028, 0xe, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x2, 0x6d}, 0x81100, 0x100, 0x1, 0x9, 0x3, 0x4, 0x45, 0x0, 0x14000000, 0x0, 0x7}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f00000001c0)={0xfff, 0x8, 0x5, 0x8}) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000180)={0x1, 0x7, 0x1}) 15:47:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, 0x0) 15:47:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x8000000000000, 0x40) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000001c0)=[0x7a1a, 0x10001, 0xe91b, 0xfffffffa, 0xffffffff, 0x4, 0x80000000, 0x3ff, 0x5], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000140)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x3}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000180)={0x8000000000000000}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000080)={0x20000000, 0x20, 0x559}) 15:47:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, 0x0) 15:47:15 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000280)=""/4096) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x301040, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000000)={0x1, 0x4}, 0x2) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x139b00, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000140)={0x2, 0xe8}, 0x2) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000001280)={0x0, 0x80, 0x6, 0x3, 0xd4, 0x0, 0x0, 0x6, 0x20028, 0xe, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x2, 0x6d}, 0x81100, 0x100, 0x1, 0x9, 0x3, 0x4, 0x45, 0x0, 0x14000000, 0x0, 0x7}) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f00000001c0)={0xfff, 0x8, 0x5, 0x8}) (async) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000180)={0x1, 0x7, 0x1}) 15:47:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, 0x0) 15:47:15 executing program 0: getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) (async, rerun: 64) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f00000001c0)={0x9, 0x57, 0x4, 0x3, 0xfffffbff, 0x1, 0x9}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000180)={0x7, 0x6, {}, {r0}, 0x2, 0x8000}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x2, 0x5, {}, {r0}, 0x5f, 0x601}) r2 = syz_open_dev$dri(&(0x7f0000000140), 0xffffffffdffffffa, 0x2c102) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x8000000000000, 0x40) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000002c0)) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x2a, 0x38, 0x4, 0xc, 0x5, 0x9, 0x4, 0x14d, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x2c, 0x7, 0x6, 0x4, 0x7, 0x5, 0x1, 0x102, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000280)={r1, &(0x7f0000000200)=""/87}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f00000000c0)="7afcf6f0107654caa0e4a910c7e21d400342bd9d21a8dbd9e05cc7ba963e1dafd79d0b648cca", 0x26}) 15:47:15 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000001c0)=[0x7a1a, 0x10001, 0xe91b, 0xfffffffa, 0xffffffff, 0x4, 0x80000000, 0x3ff, 0x5], 0x9, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000001c0)=[0x7a1a, 0x10001, 0xe91b, 0xfffffffa, 0xffffffff, 0x4, 0x80000000, 0x3ff, 0x5], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000140)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000180)={0x8000000000000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000080)={0x20000000, 0x20, 0x559}) 15:47:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)) 15:47:15 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x8000000000000, 0x40) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x8000000000000, 0x40) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:15 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000280)=""/4096) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x301040, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x301040, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000000)={0x1, 0x4}, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x139b00, 0x0) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x139b00, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000140)={0x2, 0xe8}, 0x2) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000001280)={0x0, 0x80, 0x6, 0x3, 0xd4, 0x0, 0x0, 0x6, 0x20028, 0xe, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x2, 0x6d}, 0x81100, 0x100, 0x1, 0x9, 0x3, 0x4, 0x45, 0x0, 0x14000000, 0x0, 0x7}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f00000001c0)={0xfff, 0x8, 0x5, 0x8}) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000180)={0x1, 0x7, 0x1}) 15:47:15 executing program 0: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x4, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x1000, 0x4, {"fe61e14a1db475edbfdebec9827d931e"}, 0x5, 0xfffffffffffffff7, 0x9}}}, 0xa0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x2a000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000040)=""/45) 15:47:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)) 15:47:15 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000014}, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:15 executing program 0: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x4, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x1000, 0x4, {"fe61e14a1db475edbfdebec9827d931e"}, 0x5, 0xfffffffffffffff7, 0x9}}}, 0xa0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x2a000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000200)={0x12}) syz_open_dev$dri(&(0x7f0000000040), 0x3f, 0x501002) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x208840, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000240)={0xa, 0x4}, 0xc) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f00000001c0)=0x8000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0xdb1a, 0x400, 0x3, 0xb0b0b0b0}) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x9) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000140)={0xf47, 0x0, {}, {0xffffffffffffffff}, 0x200, 0x3ff}) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000000)={0x6}) 15:47:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000040)=""/45) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000040)=""/45) (async) 15:47:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000002c0)) (async) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x2a, 0x38, 0x4, 0xc, 0x5, 0x9, 0x4, 0x14d, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x2c, 0x7, 0x6, 0x4, 0x7, 0x5, 0x1, 0x102, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000280)={r1, &(0x7f0000000200)=""/87}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f00000000c0)="7afcf6f0107654caa0e4a910c7e21d400342bd9d21a8dbd9e05cc7ba963e1dafd79d0b648cca", 0x26}) 15:47:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)) 15:47:16 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000014}, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000040)=""/45) 15:47:16 executing program 0: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x4, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x1000, 0x4, {"fe61e14a1db475edbfdebec9827d931e"}, 0x5, 0xfffffffffffffff7, 0x9}}}, 0xa0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x2a000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000200)={0x12}) syz_open_dev$dri(&(0x7f0000000040), 0x3f, 0x501002) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x208840, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000240)={0xa, 0x4}, 0xc) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) (async) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f00000001c0)=0x8000) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0xdb1a, 0x400, 0x3, 0xb0b0b0b0}) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x9) (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000140)={0xf47, 0x0, {}, {0xffffffffffffffff}, 0x200, 0x3ff}) (async) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000000)={0x6}) 15:47:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000002c0)) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x2a, 0x38, 0x4, 0xc, 0x5, 0x9, 0x4, 0x14d, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x2c, 0x7, 0x6, 0x4, 0x7, 0x5, 0x1, 0x102, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000280)={r1, &(0x7f0000000200)=""/87}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f00000000c0)="7afcf6f0107654caa0e4a910c7e21d400342bd9d21a8dbd9e05cc7ba963e1dafd79d0b648cca", 0x26}) 15:47:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426007040ffdbdf257600000008000300", @ANYRES32=r1, @ANYBLOB="0c0058000e000000000000000c0058003a000000000000000c0058004d000000000000000c0058004c00000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) 15:47:16 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000014}, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000080)) 15:47:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000200)={0x12}) syz_open_dev$dri(&(0x7f0000000040), 0x3f, 0x501002) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x208840, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000240)={0xa, 0x4}, 0xc) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f00000001c0)=0x8000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0xdb1a, 0x400, 0x3, 0xb0b0b0b0}) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x9) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000140)={0xf47, 0x0, {}, {0xffffffffffffffff}, 0x200, 0x3ff}) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000000)={0x6}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000200)={0x12}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x3f, 0x501002) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x208840, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000240)={0xa, 0x4}, 0xc) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) (async) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f00000001c0)=0x8000) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0xdb1a, 0x400, 0x3, 0xb0b0b0b0}) (async) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x9) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000140)={0xf47, 0x0, {}, {0xffffffffffffffff}, 0x200, 0x3ff}) (async) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000000)={0x6}) (async) 15:47:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426007040ffdbdf257600000008000300", @ANYRES32=r1, @ANYBLOB="0c0058000e000000000000000c0058003a000000000000000c0058004d000000000000000c0058004c00000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) 15:47:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000002c0)) (async) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x2a, 0x38, 0x4, 0xc, 0x5, 0x9, 0x4, 0x14d, 0xffffffffffffffff}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (rerun: 32) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x2c, 0x7, 0x6, 0x4, 0x7, 0x5, 0x1, 0x102, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000280)={r1, &(0x7f0000000200)=""/87}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f00000000c0)="7afcf6f0107654caa0e4a910c7e21d400342bd9d21a8dbd9e05cc7ba963e1dafd79d0b648cca", 0x26}) (rerun: 32) 15:47:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000080)) (async) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000080)) 15:47:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x600) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000140)="cfeb660dc37ee727d50dfa8f693cbd9fed986d2503196e94e826ef6c17b97d1de8826943caf37caa645e8765223b6c67cd648ebb200ddea2e8938f8647491ef573f1a0bbe2fd58d1a3450b107dec57f8edfe1f113ed0f1b0f01f8842db951b92ddb4e3f80f1bfd246751073a7fecb58a345e7e1277d1a9f2a1d0affbae655d6241d487ba3e2d1a9f4725beea6f26ae", 0x8f}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x200, 0x9}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) 15:47:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x4b99, 0x62c401) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0xb19}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xddea, 0x1) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000080)=0x5) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f00000001c0)={0x0, 0x10001, 0x80000001, 0x1, 0x16, 0x3ff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000180)={0x0, 0x9b, 0x0, 0x5, 0x2, 0x0, 0x9, 0x4, 0x80000000, 0x2, 0x3, 0x7}) 15:47:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426007040ffdbdf257600000008000300", @ANYRES32=r1, @ANYBLOB="0c0058000e000000000000000c0058003a000000000000000c0058004d000000000000000c0058004c00000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) 15:47:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r1, 0x1}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0x33}) 15:47:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000040)) 15:47:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x600) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000140)="cfeb660dc37ee727d50dfa8f693cbd9fed986d2503196e94e826ef6c17b97d1de8826943caf37caa645e8765223b6c67cd648ebb200ddea2e8938f8647491ef573f1a0bbe2fd58d1a3450b107dec57f8edfe1f113ed0f1b0f01f8842db951b92ddb4e3f80f1bfd246751073a7fecb58a345e7e1277d1a9f2a1d0affbae655d6241d487ba3e2d1a9f4725beea6f26ae", 0x8f}) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x200, 0x9}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) 15:47:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000080)) 15:47:18 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x4b99, 0x62c401) (async) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x4b99, 0x62c401) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0xb19}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xddea, 0x1) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000080)=0x5) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f00000001c0)={0x0, 0x10001, 0x80000001, 0x1, 0x16, 0x3ff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000180)={0x0, 0x9b, 0x0, 0x5, 0x2, 0x0, 0x9, 0x4, 0x80000000, 0x2, 0x3, 0x7}) 15:47:18 executing program 0: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x600) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000140)="cfeb660dc37ee727d50dfa8f693cbd9fed986d2503196e94e826ef6c17b97d1de8826943caf37caa645e8765223b6c67cd648ebb200ddea2e8938f8647491ef573f1a0bbe2fd58d1a3450b107dec57f8edfe1f113ed0f1b0f01f8842db951b92ddb4e3f80f1bfd246751073a7fecb58a345e7e1277d1a9f2a1d0affbae655d6241d487ba3e2d1a9f4725beea6f26ae", 0x8f}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x200, 0x9}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) 15:47:19 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}], 0x0, 0x0, '\x00', 0x3, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101c03) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) 15:47:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x2) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000000c0)=0x1ff) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x7, 0x0, 0x1}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x2}) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000140)) 15:47:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x4b99, 0x62c401) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0xb19}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xddea, 0x1) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000080)=0x5) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f00000001c0)={0x0, 0x10001, 0x80000001, 0x1, 0x16, 0x3ff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000180)={0x0, 0x9b, 0x0, 0x5, 0x2, 0x0, 0x9, 0x4, 0x80000000, 0x2, 0x3, 0x7}) 15:47:19 executing program 0: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:19 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) 15:47:19 executing program 0: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (fail_nth: 1) 15:47:19 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) 15:47:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 15:47:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x2) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000000c0)=0x1ff) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x7, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x2}) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000140)) 15:47:19 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}], 0x0, 0x0, '\x00', 0x3, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}], 0x0, 0x0, '\x00', 0x3, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101c03) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) 15:47:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000080)={r1, 0x1}) 15:47:19 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) 15:47:19 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 15:47:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x0) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x2) (rerun: 32) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000000c0)=0x1ff) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x7, 0x0, 0x1}) (async, rerun: 64) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x2}) (async) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000140)) 15:47:19 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}], 0x0, 0x0, '\x00', 0x3, 0x1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101c03) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101c03) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) 15:47:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000080)={r1, 0x1}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000080)={r1, 0x1}) (async) 15:47:19 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}], 0x2, 0x0, '\x00', 0x1, 0x2}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) 15:47:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x2, &(0x7f0000000000)={0x3}) 15:47:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000080)={r1, 0x1}) 15:47:20 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 15:47:20 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x3, 0x0, {0xffffffffffffffff}, {r0}, 0xe3, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:20 executing program 3: openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x210000) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000001c0)={0x4}) 15:47:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000240)={0x0, 0x179}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x0, 0x2c4d}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:20 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}], 0x2, 0x0, '\x00', 0x1, 0x2}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) 15:47:20 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x3, 0x0, {0xffffffffffffffff}, {r0}, 0xe3, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x3, 0x0, {0xffffffffffffffff}, {r0}, 0xe3, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) (async) 15:47:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x5421, &(0x7f0000000000)={0x3}) 15:47:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000040)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x21, 0x3a, 0x15, 0x7, 0x4, 0x1000, 0x4, 0x77}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000280)={0x2a, 0xfffffffffffffbff}) r2 = syz_open_dev$rtc(&(0x7f00000002c0), 0x37a3, 0x200000) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x2, 0x2d93, &(0x7f00000000c0)=""/106, &(0x7f00000001c0)=""/125, &(0x7f0000000140)=""/35, 0xf000}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x400000, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000380)) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r4, 0x8008af73, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f00000003c0)=r5) 15:47:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000240)={0x0, 0x179}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x0, 0x2c4d}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:20 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}], 0x2, 0x0, '\x00', 0x1, 0x2}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) 15:47:20 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x3, 0x0, {0xffffffffffffffff}, {r0}, 0xe3, 0x5}) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x5450, &(0x7f0000000000)={0x3}) 15:47:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000240)={0x0, 0x179}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x0, 0x2c4d}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:20 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000040)) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000040)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x21, 0x3a, 0x15, 0x7, 0x4, 0x1000, 0x4, 0x77}) (async) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x21, 0x3a, 0x15, 0x7, 0x4, 0x1000, 0x4, 0x77}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000280)={0x2a, 0xfffffffffffffbff}) r2 = syz_open_dev$rtc(&(0x7f00000002c0), 0x37a3, 0x200000) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x2, 0x2d93, &(0x7f00000000c0)=""/106, &(0x7f00000001c0)=""/125, &(0x7f0000000140)=""/35, 0xf000}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x400000, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000380)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r4, 0x8008af73, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f00000003c0)=r5) 15:47:21 executing program 3: openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x210000) (async, rerun: 32) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) (async, rerun: 32) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000001c0)={0x4}) 15:47:21 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x4}, 0x2) 15:47:21 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f00000000c0)={'wlan1\x00'}) socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x7}) 15:47:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x5451, &(0x7f0000000000)={0x3}) 15:47:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000040)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x21, 0x3a, 0x15, 0x7, 0x4, 0x1000, 0x4, 0x77}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000280)={0x2a, 0xfffffffffffffbff}) (async, rerun: 32) r2 = syz_open_dev$rtc(&(0x7f00000002c0), 0x37a3, 0x200000) (rerun: 32) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000300)) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x2, 0x2d93, &(0x7f00000000c0)=""/106, &(0x7f00000001c0)=""/125, &(0x7f0000000140)=""/35, 0xf000}) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x400000, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000380)) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r4, 0x8008af73, 0x0) (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f00000003c0)=r5) 15:47:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000080)={0x1a, &(0x7f0000000040)="62d32322176db9ec9c4044ac9d9e8554dd2c8400b6d9ee2b1c88"}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2, 0xb75, 0x1}) 15:47:21 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x4}, 0x2) 15:47:21 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f00000000c0)={'wlan1\x00'}) socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x7}) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) (async) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f00000000c0)={'wlan1\x00'}) (async) socket$pppoe(0x18, 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x7}) (async) 15:47:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x5452, &(0x7f0000000000)={0x3}) 15:47:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000080)={0x1a, &(0x7f0000000040)="62d32322176db9ec9c4044ac9d9e8554dd2c8400b6d9ee2b1c88"}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2, 0xb75, 0x1}) 15:47:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x6a6003) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x4f}) 15:47:21 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x4}, 0x2) 15:47:22 executing program 3: openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x210000) (async) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000001c0)={0x4}) 15:47:22 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) (rerun: 64) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f00000000c0)={'wlan1\x00'}) socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (rerun: 64) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x7}) 15:47:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x6a6003) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x4f}) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x6a6003) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x4f}) (async) 15:47:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x5460, &(0x7f0000000000)={0x3}) 15:47:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil}) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000080)={0x1a, &(0x7f0000000040)="62d32322176db9ec9c4044ac9d9e8554dd2c8400b6d9ee2b1c88"}) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2, 0xb75, 0x1}) (rerun: 64) 15:47:22 executing program 4: connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote, 0x2}, 0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x40049409, &(0x7f0000000000)={0x3}) 15:47:22 executing program 4: connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote, 0x2}, 0x10) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[{}], 0x80000001, 0x0, '\x00', 0x8, 0x1}) 15:47:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x6a6003) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x4f}) 15:47:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x80000001}) 15:47:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc0045878, &(0x7f0000000000)={0x3}) 15:47:23 executing program 3: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)=0x1000000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f00000001c0)={0x0, 0xda, ""/218}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x20, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000040)={0x0, r2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[{}], 0x80000001, 0x0, '\x00', 0x8, 0x1}) 15:47:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000040)={0x2}) 15:47:23 executing program 4: connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote, 0x2}, 0x10) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc0045878, &(0x7f0000000000)={0x3}) 15:47:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x80000001}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x80000001}) 15:47:23 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x1, 0x9, 0x3, 0xb, &(0x7f0000000000)=""/11, 0x23, &(0x7f0000000040)=""/35, 0x10, &(0x7f0000000080)=""/16}) 15:47:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x80000001}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x80000001}) (async) 15:47:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000040)={0x2}) syz_open_dev$dri(&(0x7f0000000180), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000040)={0x2}) (async) 15:47:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc0189436, &(0x7f0000000000)={0x3}) 15:47:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[{}], 0x80000001, 0x0, '\x00', 0x8, 0x1}) 15:47:23 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async, rerun: 32) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x1, 0x9, 0x3, 0xb, &(0x7f0000000000)=""/11, 0x23, &(0x7f0000000040)=""/35, 0x10, &(0x7f0000000080)=""/16}) (rerun: 64) 15:47:24 executing program 3: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)=0x1000000) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f00000001c0)={0x0, 0xda, ""/218}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x20, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000040)={0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc020660b, &(0x7f0000000000)={0x3}) 15:47:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000040)={0x2}) syz_open_dev$dri(&(0x7f0000000180), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000040)={0x2}) (async) 15:47:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="f3d2019a8b79f1222f10c8d4ec8c9112f470cb3cbcce9b6047b21915d8c4f4239b744fa28efa3d2973df8fb34b820a89bb35035a481e841dc79d23d003d5084c7f0777", 0x43}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000100)={0x3e, 0x2, 0xffffffffffffffff}) 15:47:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x7, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000000c0)={0x6}) 15:47:24 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x1, 0x9, 0x3, 0xb, &(0x7f0000000000)=""/11, 0x23, &(0x7f0000000040)=""/35, 0x10, &(0x7f0000000080)=""/16}) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x1, 0x9, 0x3, 0xb, &(0x7f0000000000)=""/11, 0x23, &(0x7f0000000040)=""/35, 0x10, &(0x7f0000000080)=""/16}) (async) 15:47:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x3, 0x80, 0x3f, 0x3, 0xd6, 0x4, 0x0, 0x1, 0x3008, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8d, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x7fff, 0x3, 0x9, 0xffffffffffffffff, 0xb8, 0x6, 0x0, 0x32, 0x0, 0x5}) 15:47:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x7, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000000c0)={0x6}) 15:47:24 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xb, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000140)=0xf1) ioctl$RTC_VL_CLR(r2, 0x7014) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x2], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x1, 0x6, 0x8}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x200541, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000100), 0x20000102) 15:47:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="f3d2019a8b79f1222f10c8d4ec8c9112f470cb3cbcce9b6047b21915d8c4f4239b744fa28efa3d2973df8fb34b820a89bb35035a481e841dc79d23d003d5084c7f0777", 0x43}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="f3d2019a8b79f1222f10c8d4ec8c9112f470cb3cbcce9b6047b21915d8c4f4239b744fa28efa3d2973df8fb34b820a89bb35035a481e841dc79d23d003d5084c7f0777", 0x43}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000100)={0x3e, 0x2, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000100)={0x3e, 0x2, 0xffffffffffffffff}) 15:47:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2, 0x5}}, 0x10) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x8, 0x3ff, 0x9cdf, 0x7, 0x401], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000000c0)={0x0, 0x1}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000100)) ioctl$RTC_VL_CLR(r4, 0x7014) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r4, 0x4008af75, &(0x7f0000000080)={0x1, 0x10000}) 15:47:24 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xb, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000140)=0xf1) ioctl$RTC_VL_CLR(r2, 0x7014) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x2], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x1, 0x6, 0x8}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x200541, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000100), 0x20000102) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xb, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000140)=0xf1) (async) ioctl$RTC_VL_CLR(r2, 0x7014) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x2], 0x1}) (async) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x1, 0x6, 0x8}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x200541, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000100), 0x20000102) (async) 15:47:25 executing program 3: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)=0x1000000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f00000001c0)={0x0, 0xda, ""/218}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x20, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000040)={0x0, r2}) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000040)={0x0, r2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x7, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000000c0)={0x6}) 15:47:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="f3d2019a8b79f1222f10c8d4ec8c9112f470cb3cbcce9b6047b21915d8c4f4239b744fa28efa3d2973df8fb34b820a89bb35035a481e841dc79d23d003d5084c7f0777", 0x43}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000100)={0x3e, 0x2, 0xffffffffffffffff}) (rerun: 32) 15:47:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x3, 0x80, 0x3f, 0x3, 0xd6, 0x4, 0x0, 0x1, 0x3008, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8d, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x7fff, 0x3, 0x9, 0xffffffffffffffff, 0xb8, 0x6, 0x0, 0x32, 0x0, 0x5}) 15:47:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2, 0x5}}, 0x10) (async) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2, 0x5}}, 0x10) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x8, 0x3ff, 0x9cdf, 0x7, 0x401], 0x5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x8, 0x3ff, 0x9cdf, 0x7, 0x401], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000000c0)={0x0, 0x1}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000100)) ioctl$RTC_VL_CLR(r4, 0x7014) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r4, 0x4008af75, &(0x7f0000000080)={0x1, 0x10000}) 15:47:25 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async, rerun: 64) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xb, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) (async, rerun: 32) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000140)=0xf1) (async) ioctl$RTC_VL_CLR(r2, 0x7014) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x2], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x1, 0x6, 0x8}) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x200541, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000100), 0x20000102) 15:47:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x104800) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xffffff9e, 0xf9ff, 0x8, 0x4, 0x4, 0x4, 0x5, 0x3], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000100)={r2, 0x1}) 15:47:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2, 0x5}}, 0x10) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x8, 0x3ff, 0x9cdf, 0x7, 0x401], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000240)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000000c0)={0x0, 0x1}) (async, rerun: 64) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000100)) ioctl$RTC_VL_CLR(r4, 0x7014) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r4, 0x4008af75, &(0x7f0000000080)={0x1, 0x10000}) 15:47:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x3, 0x80, 0x3f, 0x3, 0xd6, 0x4, 0x0, 0x1, 0x3008, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8d, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x7fff, 0x3, 0x9, 0xffffffffffffffff, 0xb8, 0x6, 0x0, 0x32, 0x0, 0x5}) 15:47:25 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64000000779cd951debf62b0721ba54c53b157f744936a00000000000000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fedbdf256500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990005000000720000003c000380200000801a000200661582a2d106dc368eda73b2abab8c1c2d335a2eddc600000c00008008000300070000000c0000800800030001000100"], 0x64}, 0x1, 0x0, 0x0, 0x8041}, 0x4000890) 15:47:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xffffff9e, 0xf9ff, 0x8, 0x4, 0x4, 0x4, 0x5, 0x3], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000100)={r2, 0x1}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xffffff9e, 0xf9ff, 0x8, 0x4, 0x4, 0x4, 0x5, 0x3], 0x8, 0x800}) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000100)={r2, 0x1}) (async) 15:47:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) socket$inet_udplite(0x2, 0x2, 0x88) 15:47:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x104800) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0x1114c0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x74d69dd838558dd8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3, 0x3, 0x4], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000000c0)={0x1000, &(0x7f00000001c0)="47c2289348af53e985c695f7d607d0c6fc4f2cd6521f021bfc792c29507528cf5f7a27dc9165e43f397a8273f354531c5d9efcfbbf40ddfbcb41a94ee8a8d872886819ef1c034ed0ed2d1a96c47cff28d4f4c1bfcc77ca0fc6a686cf6f0ca70c0fe2aeaa0065c1a2650573bfaf5dfddc349ce30fead28f184fcd52ebd3ed5e87587ca54feaafde1936b06f2fb9a22ee17b573dace7767983fa332568c5a507d6058f0691f0011b14ed637347ac644c51780f5d0eb62845c43a910a5d91c5b7c7ad89518b53b3dc6bde2bf4d05b28fc754db66d4a2fcc48650bb8934bd4b84ef737b557323cacc80b6e33f209c0606d986a9df0caf4388c7fe5ed7b36dbf5f26668a8532aaaf26e4c06229b7deddd79aa6d985d8991957f4a1591538dd3e9fa08fc25fd2b3f41c67bcb2e69d50292b92358c8de0ec645b6b2daaf7259079d6b709162a40122057d3a5f9dbd808cabc56dd176ff351bef58aa95041ca5581f0c804457d20ac903737a71c12cbf518fd25c9698b5e7bc864f79e822c322807a9f2eb3ea8926058975fb3421699ee77372acf4842f3c6578ae846dceb9d49bc55842e3d495b8a7c0c590ddfa4807a107c42d8c32d99373687f93fb549600b13967091ee0d4aa75cb0f0fd6f0cb99b3292db7c85d8928daaaddc34fa20eb6731d2001280be27a4ace13a43c50c21900e534eb886c66438915d20460500e3a71e93cc855315c76e815d2771de04e7093ff04fffb03947c07a8377b8f1ce9b50d43b593fc514c49124396b259c2a203652bb224add45ea7f2ca112252eff8d3fc7b2be1e278b057caf6b5264b078799077e35cef48fc2317cdf25b4dd7f3f93fdcf1d0d2ff90948e46fd9de712afcf2ad28e508cf712e2429cc1e70f49deb7c34795f32d6be75474ca0c689f46b95b776d497fcccafe64966e285413dde6f5247bfe6fa140e744b40b3489bb188657d509aed2d36a593623072cf8b3763c9b8144913d3103bddd9f8350ae5986f13465daf169ba602f0be7c05e45edc29dc9e8711b185336dad73d7b9c41373bed2c759a2ff9b5966b7c9f0c4520ed861b888bf07bb3a7a8ffe5644a429bf68d497bb9fbe3ab5d8b23f139f2ed90c08273de0364ac6b2884c8fe830e41315a684ec45de09b903496a9b7c165ba8a26aec0e76bbb422eada05069a53bbd5805544f9b9346a13957fd342a48f56769a14c73e628ff9e49d7647b96c23ea2c2bd679fd2d71767a8ba58d839add64b9ef6fc5b8cfdca831e22dcd9c6d66f047ea9f5e72ed0fee9db8fab5cc3b8c0352a03867c49d54e244295f71b1084ee41de5dffa5efcfd0c2db77113438f3b995edea0ce2ebd9d5c1b328409af5d65a4ec414d63221a48e6a5a96cc622996048aff3075c9194c0fcddc9862f29f648f200187f45c7c312f9bda60a62aa12eb853e31e12d926d8db2e4e370ee1e5f8ab5542f0820695a8f8335476c542272bec4372514fed449f506c85995ac5db5dfae3eb0fcd4c0f00a63018e0f11746a920da763b8b53b6062ff0ae10e2be4e64a29ffe4f22d060e5cf09fab56404890b025c035d0647f6aa3703369c7db4a2bba62cd937a6338d16193f8dfa10bc4c1155a65bb47c02f0a70270a76dcf2d796de741612b112c81dfb8fccdfb68c748e3878129ada98326f683ad08030aa0d9632422a9ea8bf00cb1b8ab038b821a22de87398fb651e8d5bcc1b195db17a5b28fe1477d0089cc1dbe68365eba3b22ed9298414e1de38e05794a7197b67e10d6f3926d1a35e9c13086858f9aa796c798fd9cd333df7ef970e83f8f4d1b47eadeac63421f0ba47aae3087bdf1b8804504ed159418b92d2d97da3a35746834a2d1ba8c9a9cf94284431f80ba16e5c866bdabac30d1ad9d8734701bce934fcbc854c2356201b218a7d9403629b6347c6f5d5aa9d37d746abb5c516172a1a3a55968c35dae5280a68201e29dd250b1c06efea5a936ed6bab8436e1c2745812c30f3f4a529700c3f34050d132a2a54e0786eedf1861780ffbf8984d11d79a6e4bd27c74a0df967ded35266d97cd04f54734f9ceda8dc3e66e7228fc5ff28267f728ec618149f6f75624cffd246a7bfeb3515398cb803e795c06c9d83186593b83f2094c9716eb43f5126f045325f1331341d9a738cc70a0a233a68eaad81591b2a75c873f6b2123755ec951bb0b065e5f80ee8832412c1bee804473f24ae63243761b6f2be9b8eefb5ed2164484dc30ca6e38d6457bdb12b26bc052ed5d5279e857cb3ccbbdc8c60a19b8541be62f396a6cf70d262880248b4f80b46e7450b5266257f8afecc40f8af0545484c5f976e5dc755516dfff927deb11524f137bbb879bcce9998446aaa7ba84ed11db65592a19a85024d8c28c17a95680d1e0c387fc55eb916f06b0aae05cee57571c9d0e72c4dd7ed0a43c9cc5e3ef5d70ce6972b9e9f09febb3c57a19eb98322bedfca314433a3207ecfe62fa46cbd26dcbc83b1c2cbf3ada2cbb5fa5ede672d4ff81b1f2dce580ddb0b484d71c08f2b16b290be3ecb50dc9d2b6fca0aef55f39be53a7abe585d3b0cf21731c5b1b8b1340e62df41200dfdfbf51b5e7fc3ebcaa40f511652108b3a079f79c7d00c82c97ec4b5a51a151db436fb1b4d3f2f255e287f4e9417145580fff8d37bf7b01f7e35901672449195a5f352424af39701862603cd0fa3b5f6d9cb8a5f12d22da8e89f92e2e19c796f1efa3c94216c0fa921c65f934223537791a6b31e431dc3a90abb52b31218eebedc2268adb33e0f98caa88254ff759a09564ec8b1b564cae5fda08b03257eb983b1d2334d32ec7c67d3fd18029e1a89f99d6d91f710e50cd5ab683f0bfa2438d8cc918a0f1b35b280e750319dfc20b0bc7ac523ca7583e3b085a6f6dcd947f418660643ea1c9fd79a0bfb6606040edab8f9b9dc9157ec9ab4551bc165ac09847072da7b677a7dc483fe58f4f997f57aadc501e28adcca1d47042f38c89136e7dafda9bcdecaedc052b42992f5e9c3b489a97b40053f88a81ad2e0819b7909df884c33123028678dcbd02f9a750e802d15b9b8b5102b4f3ad725358a28047159a8b5745a7914fff492f035639e89c52addc7dbab68bade723e7ff7eefd18bed61f326d3213bfdfa304686cafe959e189c0206425b161ac4a56800fb3d4ba24f42407238ec161baa913315c37fa61edd30bf0b1cb5a2be402a1590ab9d07b5be92292e2d73c72b833def361bdd1ad95aa3a2559ba4c89b09dbf9ff389b1625ad9c7ade5cfd1d0436958214e76de09271ee122a9d00f485a95afa7f19391a5a318d97335107d2f106fbc7334e6f3a9e0aca5ee42c1ab0ce63aeb60bbdca6bc63e8284f91b6dce9bb314a97fc4b57f5608ff4b509f2094f8b7deb6866ba5033b4139026d4eb0a102fde9bb5b71afc59d1671b943e4b43f5d9203e00de9179b62f8e2b10aed31390ef3a057b3587a07a15fd94b054ee22492182be10b5ea09b89fe2de13c2f7f9a8e903d066ff4682152d14571f2a41ae0a70fe2139f883222deb762eb472a76fa4f9add17c84ddc278701bcef09182a1938f6392b3c43f1996db5df2052d45edc73b8e2467b99efbf3cfd27ac845001b5936623e9a4514cfea9b53865d8e076d8b9849676721488826fc643015769784359a2866f8ac529c5cc3aad0b455f603fbc5c269acbff432ac2e9db646052c21633ce51a25b240e018e2b879367851dde0be67223b9158d9c66c2063ed735c2b60cc6bb6f08ed9259eea78f5fbf8f30ea9272688e7ce6cbe5e0e6d0d49026642f7aae433b7771dc705dd42d9f610a6c5c1ba5d1e97f5d8296e30dc532cf339b0ddad363f35b4fd18d762effa3d6c32b8100a7336e7a2aad4cc6d288c5954c737825004d6b0e79abf8cf4b5608b325b6a16983cce50d46e92a25b0030e66983d3bfdfd0d20606ace234d218d0424b0b97a1872154c81663c8dec1b824ceb196ffcb397a0d1b56b7b6bacaef04e8fb58c0fafc3bcbab492f6eb1735b74eb833f681ad5eeca771af503ad1b216b53a437f93fdfae5ac330a7b48930ce9a817fb022e7fe661b736690708d95512f981e419fd9971ad87ce384ed76c31dded3f0c4da8e7d7e0616c542bb349f34cd48bc442c6fc9248c05676ce24cbdcc9b9ecc073c693ed7ce7a7a60126176e7e1425a809552666757689d6bc7a7b282301cb8bbb3acfba5beda749b958c57592ce5e3d0226b0ff8ce3b810bf3786657a503307682448df6dc9ca1f3dd88e0fd4f61455fd86660ecb98ecbe3f491f40f4a9fd676514437d73dade24d24c2308611dfba7d13c2f9e44c078da726f73166c824306d54b923453209b3201c67c09fcce6c6ab3ee9cf0ae00c62d9cce4ce220e2f29aa6330f81e75c32f6b5c5a27a10fe692f3e462c7a66b4e54dd6e73c9e912fdd645cb88a371611e02493e8fe622d4c8c66d785e7522ced41261833f5f101a75983a9bd63bd5b41e91b26e89ca4a7b6dda5e5073d7e5e5275e4e69b898d04943e0407ac7982f1c395703c8a6f78d80f195cf03012ba7848d6fad0c40fe2c2ee66f7be4d138818d09a97e83a9602cb9a96d959b72131ee14f334d6102acba469f410f30eed6c6e95c14a6aadef15c529df73e1faa6b15ddaa095f52ebf6ed4751c78756834a93a330ab93e8d1d3ce065a469b370ba1556e32850bbc559f84b204186b5bc1f9391a0005a67e89e72ba43557e97d5f2c592dd5b387ec898f4df920aefd2d8feea5bbc8a72266c0992ead418a94c1fc6cc76f4931c20eb85a5788796a66b2c33299ac71fa3712408c992b5d086ee653aaf7397881cb27ff480af0855ec638b2d9823e248bc81b4e2f63f816ce583498110681fe4d0064e1e43e35fead43792562a15d001d61fc84d90323ee7bd9805975f3f24ce00c8cf974910e00a2b8b60168471bea1ddf3aa2912dc54d280f557bec11fd708d97f447c73fffaa6e482319f01a34a792ee8101367a0303e46e7ef91263cb50c8f7f367aa8cfb1ea533a85e823990580b1bc1c9d3d730a2d25ddabceba1fc409c723a9b5404eabe15f94833b15f30e2cd1b9714aecc6a96d43bd66ab9c7749b0cf81ee5e08d2fd5abda2e0a5509f5cfc89110cd87dfae3e8087638d7ba73486ac9bb35ad0e3cd83b7dbd8f8d3aa74519756843f3e6b3743f77d28aca77ea13919212f43a754be5ccb5d270999dc01ed989d33e89e14f1b6319cb008bcb98fa0fe58ade9703d9222c031892cb687cab06aaa5a8b83f425c8f291a540cbcdefb2de8bd4c56deb01f933466223cad711f5951e9b731b495ad56d1a172b24361c2e4ba11f99b2aca35d87c3e59150a12f8f23fb20be9142acd909bebbfbffd64292f5fba619d180bee3445e3517292f9c2353919deaf52b7e90eea935d40606c7ff05185cbff502bea01db62f123e78aaa5bf1f1c9bc70dae5753b06b5b5193af63302f1d44cef56caba5042aad30a2238942b6d61041332a2713ca85992032b3ff2e1b7c06bbce3076c5d60aae211ed8df19946c8728d73e141feee6794e41dcf95c54ab24c4f17050ae523f21e5c27ea6df97aa166f4b89164549bc5463c6b2b4748527c33597359fb45e2c9ead778236c3641946181d7f1cb6822df6f425d0fc727962b5e30b6e8f2ea454d7da773feae9f0cc615e994909681a990c1a045093c0bd1de37d0cceb89ba6ccf0ae635ba8f767f04efdabc271b6bb5bf797d29f7d8f87dc05fcc6405a1d82e31e9c5cd75ff4f17f801df56e39bdc4b7ab0a1c7c7d2fe08a127c032c2049a4ab9d1b22f0e5df40ba"}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:26 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64000000779cd951debf62b0721ba54c53b157f744936a00000000000000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fedbdf256500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990005000000720000003c000380200000801a000200661582a2d106dc368eda73b2abab8c1c2d335a2eddc600000c00008008000300070000000c0000800800030001000100"], 0x64}, 0x1, 0x0, 0x0, 0x8041}, 0x4000890) 15:47:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xffffff9e, 0xf9ff, 0x8, 0x4, 0x4, 0x4, 0x5, 0x3], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000100)={r2, 0x1}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xffffff9e, 0xf9ff, 0x8, 0x4, 0x4, 0x4, 0x5, 0x3], 0x8, 0x800}) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000100)={r2, 0x1}) (async) 15:47:26 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64000000779cd951debf62b0721ba54c53b157f744936a00000000000000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fedbdf256500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990005000000720000003c000380200000801a000200661582a2d106dc368eda73b2abab8c1c2d335a2eddc600000c00008008000300070000000c0000800800030001000100"], 0x64}, 0x1, 0x0, 0x0, 0x8041}, 0x4000890) 15:47:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x74d69dd838558dd8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3, 0x3, 0x4], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000000c0)={0x1000, &(0x7f00000001c0)="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"}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0x1114c0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0x1114c0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) 15:47:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x104800) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:26 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000240)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000280)={r1, 0x0}) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x80, 0x2, 0x9, 0x2, 0x0, 0x4d026cc, 0x208, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x18004, 0xffffffffffffff00, 0x306, 0x3, 0xffffffffffffffff, 0x1f, 0x6, 0x0, 0x2, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0), 0x18000, 0x0) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000200)) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x3}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1041, 0x0) r5 = openat$md(0xffffffffffffff9c, &(0x7f0000000340), 0x101040, 0x0) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000380)) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000140)={0x0, 0x24}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r7, 0xc008af12, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r8, 0x8008af73, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r8, 0x4008af23, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_GET_MAP(r7, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffa000/0x3000)=nil}) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r6, 0x40086409, &(0x7f00000002c0)={r2}) 15:47:26 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000040)={0x0, 0xcd}, 0x2) 15:47:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) socket$inet_udplite(0x2, 0x2, 0x88) 15:47:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x74d69dd838558dd8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3, 0x3, 0x4], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000000c0)={0x1000, &(0x7f00000001c0)="47c2289348af53e985c695f7d607d0c6fc4f2cd6521f021bfc792c29507528cf5f7a27dc9165e43f397a8273f354531c5d9efcfbbf40ddfbcb41a94ee8a8d872886819ef1c034ed0ed2d1a96c47cff28d4f4c1bfcc77ca0fc6a686cf6f0ca70c0fe2aeaa0065c1a2650573bfaf5dfddc349ce30fead28f184fcd52ebd3ed5e87587ca54feaafde1936b06f2fb9a22ee17b573dace7767983fa332568c5a507d6058f0691f0011b14ed637347ac644c51780f5d0eb62845c43a910a5d91c5b7c7ad89518b53b3dc6bde2bf4d05b28fc754db66d4a2fcc48650bb8934bd4b84ef737b557323cacc80b6e33f209c0606d986a9df0caf4388c7fe5ed7b36dbf5f26668a8532aaaf26e4c06229b7deddd79aa6d985d8991957f4a1591538dd3e9fa08fc25fd2b3f41c67bcb2e69d50292b92358c8de0ec645b6b2daaf7259079d6b709162a40122057d3a5f9dbd808cabc56dd176ff351bef58aa95041ca5581f0c804457d20ac903737a71c12cbf518fd25c9698b5e7bc864f79e822c322807a9f2eb3ea8926058975fb3421699ee77372acf4842f3c6578ae846dceb9d49bc55842e3d495b8a7c0c590ddfa4807a107c42d8c32d99373687f93fb549600b13967091ee0d4aa75cb0f0fd6f0cb99b3292db7c85d8928daaaddc34fa20eb6731d2001280be27a4ace13a43c50c21900e534eb886c66438915d20460500e3a71e93cc855315c76e815d2771de04e7093ff04fffb03947c07a8377b8f1ce9b50d43b593fc514c49124396b259c2a203652bb224add45ea7f2ca112252eff8d3fc7b2be1e278b057caf6b5264b078799077e35cef48fc2317cdf25b4dd7f3f93fdcf1d0d2ff90948e46fd9de712afcf2ad28e508cf712e2429cc1e70f49deb7c34795f32d6be75474ca0c689f46b95b776d497fcccafe64966e285413dde6f5247bfe6fa140e744b40b3489bb188657d509aed2d36a593623072cf8b3763c9b8144913d3103bddd9f8350ae5986f13465daf169ba602f0be7c05e45edc29dc9e8711b185336dad73d7b9c41373bed2c759a2ff9b5966b7c9f0c4520ed861b888bf07bb3a7a8ffe5644a429bf68d497bb9fbe3ab5d8b23f139f2ed90c08273de0364ac6b2884c8fe830e41315a684ec45de09b903496a9b7c165ba8a26aec0e76bbb422eada05069a53bbd5805544f9b9346a13957fd342a48f56769a14c73e628ff9e49d7647b96c23ea2c2bd679fd2d71767a8ba58d839add64b9ef6fc5b8cfdca831e22dcd9c6d66f047ea9f5e72ed0fee9db8fab5cc3b8c0352a03867c49d54e244295f71b1084ee41de5dffa5efcfd0c2db77113438f3b995edea0ce2ebd9d5c1b328409af5d65a4ec414d63221a48e6a5a96cc622996048aff3075c9194c0fcddc9862f29f648f200187f45c7c312f9bda60a62aa12eb853e31e12d926d8db2e4e370ee1e5f8ab5542f0820695a8f8335476c542272bec4372514fed449f506c85995ac5db5dfae3eb0fcd4c0f00a63018e0f11746a920da763b8b53b6062ff0ae10e2be4e64a29ffe4f22d060e5cf09fab56404890b025c035d0647f6aa3703369c7db4a2bba62cd937a6338d16193f8dfa10bc4c1155a65bb47c02f0a70270a76dcf2d796de741612b112c81dfb8fccdfb68c748e3878129ada98326f683ad08030aa0d9632422a9ea8bf00cb1b8ab038b821a22de87398fb651e8d5bcc1b195db17a5b28fe1477d0089cc1dbe68365eba3b22ed9298414e1de38e05794a7197b67e10d6f3926d1a35e9c13086858f9aa796c798fd9cd333df7ef970e83f8f4d1b47eadeac63421f0ba47aae3087bdf1b8804504ed159418b92d2d97da3a35746834a2d1ba8c9a9cf94284431f80ba16e5c866bdabac30d1ad9d8734701bce934fcbc854c2356201b218a7d9403629b6347c6f5d5aa9d37d746abb5c516172a1a3a55968c35dae5280a68201e29dd250b1c06efea5a936ed6bab8436e1c2745812c30f3f4a529700c3f34050d132a2a54e0786eedf1861780ffbf8984d11d79a6e4bd27c74a0df967ded35266d97cd04f54734f9ceda8dc3e66e7228fc5ff28267f728ec618149f6f75624cffd246a7bfeb3515398cb803e795c06c9d83186593b83f2094c9716eb43f5126f045325f1331341d9a738cc70a0a233a68eaad81591b2a75c873f6b2123755ec951bb0b065e5f80ee8832412c1bee804473f24ae63243761b6f2be9b8eefb5ed2164484dc30ca6e38d6457bdb12b26bc052ed5d5279e857cb3ccbbdc8c60a19b8541be62f396a6cf70d262880248b4f80b46e7450b5266257f8afecc40f8af0545484c5f976e5dc755516dfff927deb11524f137bbb879bcce9998446aaa7ba84ed11db65592a19a85024d8c28c17a95680d1e0c387fc55eb916f06b0aae05cee57571c9d0e72c4dd7ed0a43c9cc5e3ef5d70ce6972b9e9f09febb3c57a19eb98322bedfca314433a3207ecfe62fa46cbd26dcbc83b1c2cbf3ada2cbb5fa5ede672d4ff81b1f2dce580ddb0b484d71c08f2b16b290be3ecb50dc9d2b6fca0aef55f39be53a7abe585d3b0cf21731c5b1b8b1340e62df41200dfdfbf51b5e7fc3ebcaa40f511652108b3a079f79c7d00c82c97ec4b5a51a151db436fb1b4d3f2f255e287f4e9417145580fff8d37bf7b01f7e35901672449195a5f352424af39701862603cd0fa3b5f6d9cb8a5f12d22da8e89f92e2e19c796f1efa3c94216c0fa921c65f934223537791a6b31e431dc3a90abb52b31218eebedc2268adb33e0f98caa88254ff759a09564ec8b1b564cae5fda08b03257eb983b1d2334d32ec7c67d3fd18029e1a89f99d6d91f710e50cd5ab683f0bfa2438d8cc918a0f1b35b280e750319dfc20b0bc7ac523ca7583e3b085a6f6dcd947f418660643ea1c9fd79a0bfb6606040edab8f9b9dc9157ec9ab4551bc165ac09847072da7b677a7dc483fe58f4f997f57aadc501e28adcca1d47042f38c89136e7dafda9bcdecaedc052b42992f5e9c3b489a97b40053f88a81ad2e0819b7909df884c33123028678dcbd02f9a750e802d15b9b8b5102b4f3ad725358a28047159a8b5745a7914fff492f035639e89c52addc7dbab68bade723e7ff7eefd18bed61f326d3213bfdfa304686cafe959e189c0206425b161ac4a56800fb3d4ba24f42407238ec161baa913315c37fa61edd30bf0b1cb5a2be402a1590ab9d07b5be92292e2d73c72b833def361bdd1ad95aa3a2559ba4c89b09dbf9ff389b1625ad9c7ade5cfd1d0436958214e76de09271ee122a9d00f485a95afa7f19391a5a318d97335107d2f106fbc7334e6f3a9e0aca5ee42c1ab0ce63aeb60bbdca6bc63e8284f91b6dce9bb314a97fc4b57f5608ff4b509f2094f8b7deb6866ba5033b4139026d4eb0a102fde9bb5b71afc59d1671b943e4b43f5d9203e00de9179b62f8e2b10aed31390ef3a057b3587a07a15fd94b054ee22492182be10b5ea09b89fe2de13c2f7f9a8e903d066ff4682152d14571f2a41ae0a70fe2139f883222deb762eb472a76fa4f9add17c84ddc278701bcef09182a1938f6392b3c43f1996db5df2052d45edc73b8e2467b99efbf3cfd27ac845001b5936623e9a4514cfea9b53865d8e076d8b9849676721488826fc643015769784359a2866f8ac529c5cc3aad0b455f603fbc5c269acbff432ac2e9db646052c21633ce51a25b240e018e2b879367851dde0be67223b9158d9c66c2063ed735c2b60cc6bb6f08ed9259eea78f5fbf8f30ea9272688e7ce6cbe5e0e6d0d49026642f7aae433b7771dc705dd42d9f610a6c5c1ba5d1e97f5d8296e30dc532cf339b0ddad363f35b4fd18d762effa3d6c32b8100a7336e7a2aad4cc6d288c5954c737825004d6b0e79abf8cf4b5608b325b6a16983cce50d46e92a25b0030e66983d3bfdfd0d20606ace234d218d0424b0b97a1872154c81663c8dec1b824ceb196ffcb397a0d1b56b7b6bacaef04e8fb58c0fafc3bcbab492f6eb1735b74eb833f681ad5eeca771af503ad1b216b53a437f93fdfae5ac330a7b48930ce9a817fb022e7fe661b736690708d95512f981e419fd9971ad87ce384ed76c31dded3f0c4da8e7d7e0616c542bb349f34cd48bc442c6fc9248c05676ce24cbdcc9b9ecc073c693ed7ce7a7a60126176e7e1425a809552666757689d6bc7a7b282301cb8bbb3acfba5beda749b958c57592ce5e3d0226b0ff8ce3b810bf3786657a503307682448df6dc9ca1f3dd88e0fd4f61455fd86660ecb98ecbe3f491f40f4a9fd676514437d73dade24d24c2308611dfba7d13c2f9e44c078da726f73166c824306d54b923453209b3201c67c09fcce6c6ab3ee9cf0ae00c62d9cce4ce220e2f29aa6330f81e75c32f6b5c5a27a10fe692f3e462c7a66b4e54dd6e73c9e912fdd645cb88a371611e02493e8fe622d4c8c66d785e7522ced41261833f5f101a75983a9bd63bd5b41e91b26e89ca4a7b6dda5e5073d7e5e5275e4e69b898d04943e0407ac7982f1c395703c8a6f78d80f195cf03012ba7848d6fad0c40fe2c2ee66f7be4d138818d09a97e83a9602cb9a96d959b72131ee14f334d6102acba469f410f30eed6c6e95c14a6aadef15c529df73e1faa6b15ddaa095f52ebf6ed4751c78756834a93a330ab93e8d1d3ce065a469b370ba1556e32850bbc559f84b204186b5bc1f9391a0005a67e89e72ba43557e97d5f2c592dd5b387ec898f4df920aefd2d8feea5bbc8a72266c0992ead418a94c1fc6cc76f4931c20eb85a5788796a66b2c33299ac71fa3712408c992b5d086ee653aaf7397881cb27ff480af0855ec638b2d9823e248bc81b4e2f63f816ce583498110681fe4d0064e1e43e35fead43792562a15d001d61fc84d90323ee7bd9805975f3f24ce00c8cf974910e00a2b8b60168471bea1ddf3aa2912dc54d280f557bec11fd708d97f447c73fffaa6e482319f01a34a792ee8101367a0303e46e7ef91263cb50c8f7f367aa8cfb1ea533a85e823990580b1bc1c9d3d730a2d25ddabceba1fc409c723a9b5404eabe15f94833b15f30e2cd1b9714aecc6a96d43bd66ab9c7749b0cf81ee5e08d2fd5abda2e0a5509f5cfc89110cd87dfae3e8087638d7ba73486ac9bb35ad0e3cd83b7dbd8f8d3aa74519756843f3e6b3743f77d28aca77ea13919212f43a754be5ccb5d270999dc01ed989d33e89e14f1b6319cb008bcb98fa0fe58ade9703d9222c031892cb687cab06aaa5a8b83f425c8f291a540cbcdefb2de8bd4c56deb01f933466223cad711f5951e9b731b495ad56d1a172b24361c2e4ba11f99b2aca35d87c3e59150a12f8f23fb20be9142acd909bebbfbffd64292f5fba619d180bee3445e3517292f9c2353919deaf52b7e90eea935d40606c7ff05185cbff502bea01db62f123e78aaa5bf1f1c9bc70dae5753b06b5b5193af63302f1d44cef56caba5042aad30a2238942b6d61041332a2713ca85992032b3ff2e1b7c06bbce3076c5d60aae211ed8df19946c8728d73e141feee6794e41dcf95c54ab24c4f17050ae523f21e5c27ea6df97aa166f4b89164549bc5463c6b2b4748527c33597359fb45e2c9ead778236c3641946181d7f1cb6822df6f425d0fc727962b5e30b6e8f2ea454d7da773feae9f0cc615e994909681a990c1a045093c0bd1de37d0cceb89ba6ccf0ae635ba8f767f04efdabc271b6bb5bf797d29f7d8f87dc05fcc6405a1d82e31e9c5cd75ff4f17f801df56e39bdc4b7ab0a1c7c7d2fe08a127c032c2049a4ab9d1b22f0e5df40ba"}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x74d69dd838558dd8) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3, 0x3, 0x4], 0x3, 0x800}) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000000c0)={0x1000, &(0x7f00000001c0)="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"}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) 15:47:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0x1114c0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000040)={0xfffffa99, 0xc094, 0x10000, 0x6, 0x4, 0x6}) 15:47:27 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000040)={0x0, 0xcd}, 0x2) 15:47:27 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000240)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000280)={r1, 0x0}) (async, rerun: 64) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (rerun: 64) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x80, 0x2, 0x9, 0x2, 0x0, 0x4d026cc, 0x208, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x18004, 0xffffffffffffff00, 0x306, 0x3, 0xffffffffffffffff, 0x1f, 0x6, 0x0, 0x2, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x0) (async) r3 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0), 0x18000, 0x0) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000200)) (async, rerun: 64) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x3}) (rerun: 64) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1041, 0x0) (async) r5 = openat$md(0xffffffffffffff9c, &(0x7f0000000340), 0x101040, 0x0) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000380)) (async) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000140)={0x0, 0x24}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r7, 0xc008af12, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r8, 0x8008af73, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r8, 0x4008af23, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_GET_MAP(r7, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffa000/0x3000)=nil}) (async) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r6, 0x40086409, &(0x7f00000002c0)={r2}) 15:47:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x64, 0x7, 0x8000], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x42df, 0x6d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 15:47:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000040)={0xfffffa99, 0xc094, 0x10000, 0x6, 0x4, 0x6}) 15:47:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000140)={0x0, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000100)={0x42, &(0x7f0000000080)="52b13153bed2f8501a23fe3d10fbf3ec80351e819d3d52d05abc2807d3b18bbf1bf0e450deeb7003d3a093f54f1e5f74525430c18c1295530d672298d97e24aa14f4"}) 15:47:27 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000240)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000280)={r1, 0x0}) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x80, 0x2, 0x9, 0x2, 0x0, 0x4d026cc, 0x208, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x18004, 0xffffffffffffff00, 0x306, 0x3, 0xffffffffffffffff, 0x1f, 0x6, 0x0, 0x2, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x0) (async) r3 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0), 0x18000, 0x0) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1041, 0x0) r5 = openat$md(0xffffffffffffff9c, &(0x7f0000000340), 0x101040, 0x0) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000380)) (async, rerun: 32) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000140)={0x0, 0x24}) (async, rerun: 32) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r7, 0xc008af12, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r8, 0x8008af73, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r8, 0x4008af23, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_GET_MAP(r7, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffa000/0x3000)=nil}) (async) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r6, 0x40086409, &(0x7f00000002c0)={r2}) 15:47:27 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async, rerun: 32) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (rerun: 32) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000040)={0x0, 0xcd}, 0x2) 15:47:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000140)={0x0, 0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000100)={0x42, &(0x7f0000000080)="52b13153bed2f8501a23fe3d10fbf3ec80351e819d3d52d05abc2807d3b18bbf1bf0e450deeb7003d3a093f54f1e5f74525430c18c1295530d672298d97e24aa14f4"}) 15:47:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) socket$inet_udplite(0x2, 0x2, 0x88) 15:47:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x64, 0x7, 0x8000], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x42df, 0x6d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4800) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x64, 0x7, 0x8000], 0x3, 0x80000}) (async) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x42df, 0x6d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4800) (async) 15:47:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000040)={0xfffffa99, 0xc094, 0x10000, 0x6, 0x4, 0x6}) 15:47:29 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)={0x3, r0}) socket(0x27, 0x6, 0x80000001) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:29 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000080)={0x7, &(0x7f0000000140)=""/255, &(0x7f0000003440)=[{0xffffff32, 0xe9, 0x3f, &(0x7f0000000240)=""/233}, {0xffffffff, 0x1000, 0xffffff80, &(0x7f0000000340)=""/4096}, {0x2, 0x0, 0x1f}, {0x8, 0xf2, 0x0, &(0x7f0000001340)=""/242}, {0x6, 0x1000, 0x91, &(0x7f0000001440)=""/4096}, {0x4e, 0x1000, 0x721c, &(0x7f0000002440)=""/4096}, {0xfffffffb, 0x20, 0x1f, &(0x7f0000000040)=""/32}]}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000000)) 15:47:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000140)={0x0, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000100)={0x42, &(0x7f0000000080)="52b13153bed2f8501a23fe3d10fbf3ec80351e819d3d52d05abc2807d3b18bbf1bf0e450deeb7003d3a093f54f1e5f74525430c18c1295530d672298d97e24aa14f4"}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000140)={0x0, 0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000100)={0x42, &(0x7f0000000080)="52b13153bed2f8501a23fe3d10fbf3ec80351e819d3d52d05abc2807d3b18bbf1bf0e450deeb7003d3a093f54f1e5f74525430c18c1295530d672298d97e24aa14f4"}) (async) 15:47:29 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000080)={0x7, &(0x7f0000000140)=""/255, &(0x7f0000003440)=[{0xffffff32, 0xe9, 0x3f, &(0x7f0000000240)=""/233}, {0xffffffff, 0x1000, 0xffffff80, &(0x7f0000000340)=""/4096}, {0x2, 0x0, 0x1f}, {0x8, 0xf2, 0x0, &(0x7f0000001340)=""/242}, {0x6, 0x1000, 0x91, &(0x7f0000001440)=""/4096}, {0x4e, 0x1000, 0x721c, &(0x7f0000002440)=""/4096}, {0xfffffffb, 0x20, 0x1f, &(0x7f0000000040)=""/32}]}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000000)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000080)={0x7, &(0x7f0000000140)=""/255, &(0x7f0000003440)=[{0xffffff32, 0xe9, 0x3f, &(0x7f0000000240)=""/233}, {0xffffffff, 0x1000, 0xffffff80, &(0x7f0000000340)=""/4096}, {0x2, 0x0, 0x1f}, {0x8, 0xf2, 0x0, &(0x7f0000001340)=""/242}, {0x6, 0x1000, 0x91, &(0x7f0000001440)=""/4096}, {0x4e, 0x1000, 0x721c, &(0x7f0000002440)=""/4096}, {0xfffffffb, 0x20, 0x1f, &(0x7f0000000040)=""/32}]}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a001, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000000)) (async) 15:47:29 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)={0x3, r0}) socket(0x27, 0x6, 0x80000001) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x101040) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x2008, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r2}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f0000000100)={0x10000, 0xcda5, 0x0, 0x20, 0x0, 0x8}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r5, 0x80386433, &(0x7f0000000140)=""/39) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:29 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x8000) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xe2de, 0x101000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) 15:47:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x64, 0x7, 0x8000], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x42df, 0x6d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 15:47:29 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x8000) (async, rerun: 64) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xe2de, 0x101000) (rerun: 64) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) 15:47:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x8, 0x4, 0x0, 0x10001, 0x2, [0x3, 0x2, 0x1, 0xc2df], [0x6, 0x800, 0x0, 0x6], [0x10001, 0x8, 0x2, 0x1f], [0x0, 0x4, 0x54, 0xa87]}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x800, 0x0, 0x1}) 15:47:30 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000080)={0x7, &(0x7f0000000140)=""/255, &(0x7f0000003440)=[{0xffffff32, 0xe9, 0x3f, &(0x7f0000000240)=""/233}, {0xffffffff, 0x1000, 0xffffff80, &(0x7f0000000340)=""/4096}, {0x2, 0x0, 0x1f}, {0x8, 0xf2, 0x0, &(0x7f0000001340)=""/242}, {0x6, 0x1000, 0x91, &(0x7f0000001440)=""/4096}, {0x4e, 0x1000, 0x721c, &(0x7f0000002440)=""/4096}, {0xfffffffb, 0x20, 0x1f, &(0x7f0000000040)=""/32}]}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000000)) 15:47:30 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)={0x3, r0}) (async) socket(0x27, 0x6, 0x80000001) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x101040) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x2008, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r2}) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f0000000100)={0x10000, 0xcda5, 0x0, 0x20, 0x0, 0x8}) (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_INFO(r5, 0x80386433, &(0x7f0000000140)=""/39) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x40, 0x4201) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000001c0)={0xd1, &(0x7f00000000c0)="9bc1194c16c8eda2f0133a8ce7ff9e6e3f17cfb437a796f56165617b13f7ae931b6aee4042c53078082b3036f6bf3cfbf8877b093385ad6e797156934a824b44210a71177fa38ff539a107d983ae7f1fcb71ebeabc6b2a77be198fb325d70e3408937cf2e57c0d4b0f18273dde0d585fbab848a2183377474177a9b3ca66c29ecc1e45b619738f3a81cc3c49000b9ed83d83dc588b08ab6cb3d0f5ec01de667677f7568418016878ddb27bf892e7afcc6074e632adc2fb8075898ce23be5d7e65cd5e786e9db751810b1cea1178c8f1ce4"}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000040)={0x2, 0x20, 0x8, 0x1f36231b, 0x3, 0x65000000000000}) 15:47:30 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x8000) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xe2de, 0x101000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) 15:47:30 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000080)={0x9, 0x2, 0x1}) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f00000002c0), 0x8, 0x200040) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000300)={0x2, 0x74}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) connect$pppoe(r5, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r6, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), r6, 0x6}}, 0x18) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x1}) 15:47:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x101040) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x2008, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r2}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f0000000100)={0x10000, 0xcda5, 0x0, 0x20, 0x0, 0x8}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r5, 0x80386433, &(0x7f0000000140)=""/39) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x101040) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x2008}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r2}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f0000000100)={0x10000, 0xcda5, 0x0, 0x20, 0x0, 0x8}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_INFO(r5, 0x80386433, &(0x7f0000000140)=""/39) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) 15:47:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x40, 0x4201) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000001c0)={0xd1, &(0x7f00000000c0)="9bc1194c16c8eda2f0133a8ce7ff9e6e3f17cfb437a796f56165617b13f7ae931b6aee4042c53078082b3036f6bf3cfbf8877b093385ad6e797156934a824b44210a71177fa38ff539a107d983ae7f1fcb71ebeabc6b2a77be198fb325d70e3408937cf2e57c0d4b0f18273dde0d585fbab848a2183377474177a9b3ca66c29ecc1e45b619738f3a81cc3c49000b9ed83d83dc588b08ab6cb3d0f5ec01de667677f7568418016878ddb27bf892e7afcc6074e632adc2fb8075898ce23be5d7e65cd5e786e9db751810b1cea1178c8f1ce4"}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000040)={0x2, 0x20, 0x8, 0x1f36231b, 0x3, 0x65000000000000}) syz_open_dev$dri(&(0x7f0000000080), 0x40, 0x4201) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000001c0)={0xd1, &(0x7f00000000c0)="9bc1194c16c8eda2f0133a8ce7ff9e6e3f17cfb437a796f56165617b13f7ae931b6aee4042c53078082b3036f6bf3cfbf8877b093385ad6e797156934a824b44210a71177fa38ff539a107d983ae7f1fcb71ebeabc6b2a77be198fb325d70e3408937cf2e57c0d4b0f18273dde0d585fbab848a2183377474177a9b3ca66c29ecc1e45b619738f3a81cc3c49000b9ed83d83dc588b08ab6cb3d0f5ec01de667677f7568418016878ddb27bf892e7afcc6074e632adc2fb8075898ce23be5d7e65cd5e786e9db751810b1cea1178c8f1ce4"}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000040)={0x2, 0x20, 0x8, 0x1f36231b, 0x3, 0x65000000000000}) (async) 15:47:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r2}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000240)=0x7fffffff) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x222503, 0x0) ioctl$BLKFRASET(r3, 0x1264, &(0x7f00000002c0)=0x98) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000200)) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x6803, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x4000003, 0x4008, 0xa66c00}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x1, 0x5, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000280)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r7}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x1}) 15:47:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x8, 0x4, 0x0, 0x10001, 0x2, [0x3, 0x2, 0x1, 0xc2df], [0x6, 0x800, 0x0, 0x6], [0x10001, 0x8, 0x2, 0x1f], [0x0, 0x4, 0x54, 0xa87]}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x800, 0x0, 0x1}) 15:47:31 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) (async) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000080)={0x9, 0x2, 0x1}) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) (async) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f00000002c0), 0x8, 0x200040) (async) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000300)={0x2, 0x74}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) (async) connect$pppoe(r5, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r6, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), r6, 0x6}}, 0x18) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x40, 0x4201) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000001c0)={0xd1, &(0x7f00000000c0)="9bc1194c16c8eda2f0133a8ce7ff9e6e3f17cfb437a796f56165617b13f7ae931b6aee4042c53078082b3036f6bf3cfbf8877b093385ad6e797156934a824b44210a71177fa38ff539a107d983ae7f1fcb71ebeabc6b2a77be198fb325d70e3408937cf2e57c0d4b0f18273dde0d585fbab848a2183377474177a9b3ca66c29ecc1e45b619738f3a81cc3c49000b9ed83d83dc588b08ab6cb3d0f5ec01de667677f7568418016878ddb27bf892e7afcc6074e632adc2fb8075898ce23be5d7e65cd5e786e9db751810b1cea1178c8f1ce4"}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000040)={0x2, 0x20, 0x8, 0x1f36231b, 0x3, 0x65000000000000}) syz_open_dev$dri(&(0x7f0000000080), 0x40, 0x4201) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000001c0)={0xd1, &(0x7f00000000c0)="9bc1194c16c8eda2f0133a8ce7ff9e6e3f17cfb437a796f56165617b13f7ae931b6aee4042c53078082b3036f6bf3cfbf8877b093385ad6e797156934a824b44210a71177fa38ff539a107d983ae7f1fcb71ebeabc6b2a77be198fb325d70e3408937cf2e57c0d4b0f18273dde0d585fbab848a2183377474177a9b3ca66c29ecc1e45b619738f3a81cc3c49000b9ed83d83dc588b08ab6cb3d0f5ec01de667677f7568418016878ddb27bf892e7afcc6074e632adc2fb8075898ce23be5d7e65cd5e786e9db751810b1cea1178c8f1ce4"}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000040)={0x2, 0x20, 0x8, 0x1f36231b, 0x3, 0x65000000000000}) (async) 15:47:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8, 0x0, 0x7486cf06458702b5}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000080)={r1, 0x415c}) 15:47:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r2}) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000240)=0x7fffffff) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x222503, 0x0) ioctl$BLKFRASET(r3, 0x1264, &(0x7f00000002c0)=0x98) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000200)) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x6803, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x4000003, 0x4008, 0xa66c00}) (async) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x1, 0x5, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000280)={r7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r7}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:31 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x1}) 15:47:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8, 0x0, 0x7486cf06458702b5}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000080)={r1, 0x415c}) 15:47:31 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async, rerun: 32) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async, rerun: 32) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) (async) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) (async) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000080)={0x9, 0x2, 0x1}) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) (async, rerun: 64) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000140)) (rerun: 64) syz_open_dev$loop(&(0x7f00000002c0), 0x8, 0x200040) (async, rerun: 32) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000300)={0x2, 0x74}) (async, rerun: 32) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async, rerun: 32) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async, rerun: 64) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) (async, rerun: 64) connect$pppoe(r5, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r6, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), r6, 0x6}}, 0x18) (async, rerun: 32) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (rerun: 32) 15:47:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000040)=0x24) 15:47:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r2}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000240)=0x7fffffff) (async, rerun: 32) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x222503, 0x0) (rerun: 32) ioctl$BLKFRASET(r3, 0x1264, &(0x7f00000002c0)=0x98) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000200)) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x6803, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async, rerun: 64) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x4000003, 0x4008, 0xa66c00}) (async, rerun: 64) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x1, 0x5, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000280)={r7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r7}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8, 0x0, 0x7486cf06458702b5}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000080)={r1, 0x415c}) 15:47:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x8, 0x4, 0x0, 0x10001, 0x2, [0x3, 0x2, 0x1, 0xc2df], [0x6, 0x800, 0x0, 0x6], [0x10001, 0x8, 0x2, 0x1f], [0x0, 0x4, 0x54, 0xa87]}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x800, 0x0, 0x1}) 15:47:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:32 executing program 5: ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000080)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x71, 0x773, 0xfffffffc, 0x2, 0xb, 0x8fec}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000100)) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f00000001c0)="a99265caf8411d4a46a1ca435a54da44428a9f6c3ece5ebb4be8c4f2140e0f7c6c7b55553a389b3e57ccc91ec0f810eca9e76822c9caf4b16fad506825b18f6d9195748b393c9fb4d6d432f4aad5c901af08d25768a06b95370232b08911b5e456d3e58124c56a64ad3e935330508f1a62e329c926ba6857f2882b44dc7f217dbd12abb1b5fabddc5977eb8bf401a090227498", 0x93) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000000c0)) 15:47:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000008c0)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x129400, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000740)={0xa, 0x0, [{0x6000, 0x85, &(0x7f00000001c0)=""/133}, {0x1000, 0x47, &(0x7f0000000100)=""/71}, {0x5000, 0x36, &(0x7f0000000280)=""/54}, {0x3000, 0xd, &(0x7f00000002c0)=""/13}, {0x10d000, 0xd1, &(0x7f0000000300)=""/209}, {0x2, 0x76, &(0x7f0000000400)=""/118}, {0x2, 0x6, &(0x7f0000000480)=""/6}, {0xd000, 0x93, &(0x7f00000004c0)=""/147}, {0x0, 0xab, &(0x7f0000000580)=""/171}, {0x2000, 0xd4, &(0x7f0000000640)=""/212}]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000940)={&(0x7f0000000900)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000040)=0x24) 15:47:32 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x10001}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008000}, 0x80) 15:47:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000040)=0x24) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000040)=0x24) (async) 15:47:32 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:32 executing program 5: ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000080)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x71, 0x773, 0xfffffffc, 0x2, 0xb, 0x8fec}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x71, 0x773, 0xfffffffc, 0x2, 0xb, 0x8fec}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000100)) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f00000001c0)="a99265caf8411d4a46a1ca435a54da44428a9f6c3ece5ebb4be8c4f2140e0f7c6c7b55553a389b3e57ccc91ec0f810eca9e76822c9caf4b16fad506825b18f6d9195748b393c9fb4d6d432f4aad5c901af08d25768a06b95370232b08911b5e456d3e58124c56a64ad3e935330508f1a62e329c926ba6857f2882b44dc7f217dbd12abb1b5fabddc5977eb8bf401a090227498", 0x93) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000000c0)) 15:47:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000008c0)) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x129400, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000740)={0xa, 0x0, [{0x6000, 0x85, &(0x7f00000001c0)=""/133}, {0x1000, 0x47, &(0x7f0000000100)=""/71}, {0x5000, 0x36, &(0x7f0000000280)=""/54}, {0x3000, 0xd, &(0x7f00000002c0)=""/13}, {0x10d000, 0xd1, &(0x7f0000000300)=""/209}, {0x2, 0x76, &(0x7f0000000400)=""/118}, {0x2, 0x6, &(0x7f0000000480)=""/6}, {0xd000, 0x93, &(0x7f00000004c0)=""/147}, {0x0, 0xab, &(0x7f0000000580)=""/171}, {0x2000, 0xd4, &(0x7f0000000640)=""/212}]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000940)={&(0x7f0000000900)=[0x0, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:32 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x10001}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008000}, 0x80) 15:47:32 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x480000) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000240)=0x9) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f0000000040)=""/206}) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f00000001c0)={0x0, 0x12}) 15:47:32 executing program 5: ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000080)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x71, 0x773, 0xfffffffc, 0x2, 0xb, 0x8fec}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000100)) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f00000001c0)="a99265caf8411d4a46a1ca435a54da44428a9f6c3ece5ebb4be8c4f2140e0f7c6c7b55553a389b3e57ccc91ec0f810eca9e76822c9caf4b16fad506825b18f6d9195748b393c9fb4d6d432f4aad5c901af08d25768a06b95370232b08911b5e456d3e58124c56a64ad3e935330508f1a62e329c926ba6857f2882b44dc7f217dbd12abb1b5fabddc5977eb8bf401a090227498", 0x93) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000000c0)) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000080)) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x71, 0x773, 0xfffffffc, 0x2, 0xb, 0x8fec}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) (async) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000100)) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) (async) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f00000001c0)="a99265caf8411d4a46a1ca435a54da44428a9f6c3ece5ebb4be8c4f2140e0f7c6c7b55553a389b3e57ccc91ec0f810eca9e76822c9caf4b16fad506825b18f6d9195748b393c9fb4d6d432f4aad5c901af08d25768a06b95370232b08911b5e456d3e58124c56a64ad3e935330508f1a62e329c926ba6857f2882b44dc7f217dbd12abb1b5fabddc5977eb8bf401a090227498", 0x93) (async) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000000c0)) (async) 15:47:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3144, 0x40200) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000480)={0x4, 0x1, 0xf9, 0x0, 0x4, 0x6}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000002c0)={0x2, 0x70, 0x46e4b8c1, 0x7fff}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)="5f9ccb8defa0d50e4901710233d6cadf1b53dd61675c84f66bba4b4c93eb1808deceaed234110321122c5a2e43d29e395f4b5f0b3e98883b36ca5c4ea162a1cc73ccf26ecbad2b02b6fd6306c0f46d2416895e881c3e74183a007668", 0x5c}) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000540)={0x4, 0xe48f, 0x7ff, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x4, 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x4}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000040)={0x10}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, &(0x7f0000000500)) 15:47:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000008c0)) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x129400, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000740)={0xa, 0x0, [{0x6000, 0x85, &(0x7f00000001c0)=""/133}, {0x1000, 0x47, &(0x7f0000000100)=""/71}, {0x5000, 0x36, &(0x7f0000000280)=""/54}, {0x3000, 0xd, &(0x7f00000002c0)=""/13}, {0x10d000, 0xd1, &(0x7f0000000300)=""/209}, {0x2, 0x76, &(0x7f0000000400)=""/118}, {0x2, 0x6, &(0x7f0000000480)=""/6}, {0xd000, 0x93, &(0x7f00000004c0)=""/147}, {0x0, 0xab, &(0x7f0000000580)=""/171}, {0x2000, 0xd4, &(0x7f0000000640)=""/212}]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000940)={&(0x7f0000000900)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:33 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x10001}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008000}, 0x80) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x10001}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008000}, 0x80) (async) 15:47:33 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x480000) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000240)=0x9) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f0000000040)=""/206}) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f00000001c0)={0x0, 0x12}) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x480000) (async) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000240)=0x9) (async) syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x0) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f0000000040)=""/206}) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f00000001c0)={0x0, 0x12}) (async) 15:47:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:33 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x480000) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000240)=0x9) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f0000000040)=""/206}) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f00000001c0)={0x0, 0x12}) 15:47:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3144, 0x40200) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000480)={0x4, 0x1, 0xf9, 0x0, 0x4, 0x6}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000002c0)={0x2, 0x70, 0x46e4b8c1, 0x7fff}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)="5f9ccb8defa0d50e4901710233d6cadf1b53dd61675c84f66bba4b4c93eb1808deceaed234110321122c5a2e43d29e395f4b5f0b3e98883b36ca5c4ea162a1cc73ccf26ecbad2b02b6fd6306c0f46d2416895e881c3e74183a007668", 0x5c}) (async, rerun: 32) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000540)={0x4, 0xe48f, 0x7ff, 0x4}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x4, 0x0, 0x5}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x4}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000040)={0x10}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, &(0x7f0000000500)) 15:47:33 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000004c0)={0x3, 0x5, 0x80000000}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000540), 0x2000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x4008044) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="94010000", @ANYRES16=r2, @ANYBLOB="00012dbd7000fddbdf25f00ce41508000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x4010}, 0x20000010) 15:47:33 executing program 0: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="319aa23c6355496721449ef43d523f4b3a87e9979a849117e18a2d59ddb02854fe00073ab7e656a7c2466cce4b87a0fd28d15dc1e6491e7b8cc8b9ba950d5fd4", 0x40}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x80000) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) 15:47:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/163}) 15:47:34 executing program 0: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="319aa23c6355496721449ef43d523f4b3a87e9979a849117e18a2d59ddb02854fe00073ab7e656a7c2466cce4b87a0fd28d15dc1e6491e7b8cc8b9ba950d5fd4", 0x40}) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async, rerun: 64) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3144, 0x40200) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000480)={0x4, 0x1, 0xf9, 0x0, 0x4, 0x6}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000002c0)={0x2, 0x70, 0x46e4b8c1, 0x7fff}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)="5f9ccb8defa0d50e4901710233d6cadf1b53dd61675c84f66bba4b4c93eb1808deceaed234110321122c5a2e43d29e395f4b5f0b3e98883b36ca5c4ea162a1cc73ccf26ecbad2b02b6fd6306c0f46d2416895e881c3e74183a007668", 0x5c}) (async, rerun: 64) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000540)={0x4, 0xe48f, 0x7ff, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x4, 0x0, 0x5}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x4}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000040)={0x10}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, &(0x7f0000000500)) 15:47:34 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000004c0)={0x3, 0x5, 0x80000000}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000540), 0x2000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x4008044) (async) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="94010000", @ANYRES16=r2, @ANYBLOB="00012dbd7000fddbdf25f00ce41508000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x4010}, 0x20000010) 15:47:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xbb8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0xc000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x10, 0x10001, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x67}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6558}]}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x25c403) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r1}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x5, 0x4, 0x0, 0xffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) 15:47:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/163}) 15:47:34 executing program 0: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="319aa23c6355496721449ef43d523f4b3a87e9979a849117e18a2d59ddb02854fe00073ab7e656a7c2466cce4b87a0fd28d15dc1e6491e7b8cc8b9ba950d5fd4", 0x40}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="319aa23c6355496721449ef43d523f4b3a87e9979a849117e18a2d59ddb02854fe00073ab7e656a7c2466cce4b87a0fd28d15dc1e6491e7b8cc8b9ba950d5fd4", 0x40}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) 15:47:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x1, 0x7f, 0xf6f3, 0x4, 0x9, 0x4}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) r2 = getpgrp(0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000000c0)={0x100000, 0xe4, {r2}, {0xffffffffffffffff}, 0x3, 0xec6}) 15:47:34 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000004c0)={0x3, 0x5, 0x80000000}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000004c0)={0x3, 0x5, 0x80000000}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000540), 0x2000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x4008044) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="94010000", @ANYRES16=r2, @ANYBLOB="00012dbd7000fddbdf25f00ce41508000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x4010}, 0x20000010) (async) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="94010000", @ANYRES16=r2, @ANYBLOB="00012dbd7000fddbdf25f00ce41508000300", @ANYRES32=0x0, @ANYBLOB="0c0099000100ffff4000000008000200000000005c010380a00000809c000100fa8e69a5a336b5b787335744f8b726fa9d5e5d8ffd7d4965264767dab002737cb5c843eccc96d7ddec3cfee5849a2a76b1d13201644baa167da6009f97a968fb20d389b5daa74f4b40efdb283dfb48e1b358c68bf7292e21eefc55b3aa08846b75d5b772d0f270e2305a1dfc7f7aa54a517dbdeb0e91dd88acd8cbe2c9caa314500312f643803aaecd948b9e037ed6f5f0c12b05de5fdc27b8000080b40002007c130ba8ddf564559dde2e6e7d69829fd40c8d22c3f0608f455b2af188bb9673b445caf6716ffda01190e887a9f4865ee3d9e48c9bf470ca205a5042c57ad647f4698a1248119a49e2d7759a40729babcb00f1ed75d95d2267381a2a56a3ea1a724bd10eb22d6a3971d9e7ff1d480ab2547b5500e192a6407918a6024bacc38fc33b45032dddb11fd38442f174859ec777ac15fe11d1a4ca2082217045de4147370d7428233eea0305ed5db563e4e38008000100b0000000"], 0x194}, 0x1, 0x0, 0x0, 0x4010}, 0x20000010) 15:47:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r1}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x5, 0x4, 0x0, 0xffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) 15:47:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xbb8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0xc000) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) (async, rerun: 32) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) (rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x10, 0x10001, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x67}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6558}]}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x10) (async) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x25c403) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/163}) 15:47:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x1, 0x7f, 0xf6f3, 0x4, 0x9, 0x4}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) (async) r2 = getpgrp(0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000000c0)={0x100000, 0xe4, {r2}, {0xffffffffffffffff}, 0x3, 0xec6}) 15:47:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="45a64639417355bed9c09c9e17", 0xd}) 15:47:34 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x20440, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0xc008000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000140)) 15:47:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r1}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x5, 0x4, 0x0, 0xffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r1}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x5, 0x4, 0x0, 0xffffffff}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (async) 15:47:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xfffffffb, 0xd6c], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=""/229}) 15:47:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xbb8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0xc000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x10, 0x10001, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x67}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6558}]}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x25c403) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000000)={0x5}) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xbb8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0xc000) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) (async) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) (async) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x10, 0x10001, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x67}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6558}]}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x10) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x25c403) (async) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000000)={0x5}) (async) 15:47:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="45a64639417355bed9c09c9e17", 0xd}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="45a64639417355bed9c09c9e17", 0xd}) (async) 15:47:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x1, 0x7f, 0xf6f3, 0x4, 0x9, 0x4}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) (async) r2 = getpgrp(0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000000c0)={0x100000, 0xe4, {r2}, {0xffffffffffffffff}, 0x3, 0xec6}) 15:47:34 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x20440, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0xc008000) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000140)) 15:47:34 executing program 3: ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000000)={0x0, 0x1, 0x36, 0xf86, 0x5, 0x2, 0x7f, 0x7c, 0x0, 0x9, 0xfffffff8, 0x8001}) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:34 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xfffffffb, 0xd6c], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=""/229}) 15:47:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xf67, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x1e, 0x2, 0xf, 0x3, 0x3, 0x7, 0x3, 0x6d}) 15:47:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="45a64639417355bed9c09c9e17", 0xd}) 15:47:34 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x20440, 0x0) (async, rerun: 32) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async, rerun: 32) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0xc008000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000140)) 15:47:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x20) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={r2}) 15:47:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xfffffffb, 0xd6c], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=""/229}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xfffffffb, 0xd6c], 0x2, 0x80000}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=""/229}) (async) 15:47:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x401, 0x7, {0xffffffffffffffff}, {0xee00}, 0x3, 0x7fffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x5, 0xfb4, {}, {r2}, 0x2}) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f00000000c0)={0x2, 0x3}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x0, 0x1, 0x42}) 15:47:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xf67, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x1e, 0x2, 0xf, 0x3, 0x3, 0x7, 0x3, 0x6d}) syz_open_dev$dri(&(0x7f0000000180), 0xf67, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000, 0x0) (async) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x1e, 0x2, 0xf, 0x3, 0x3, 0x7, 0x3, 0x6d}) (async) 15:47:34 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x440600, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x20) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={r2}) 15:47:34 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x440600, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x440600, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) [ 1723.847993] [drm:drm_calc_timestamping_constants] *ERROR* crtc 29: Can't calculate constants, dotclock = 0! 15:47:36 executing program 3: ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000000)={0x0, 0x1, 0x36, 0xf86, 0x5, 0x2, 0x7f, 0x7c, 0x0, 0x9, 0xfffffff8, 0x8001}) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000000)={0x0, 0x1, 0x36, 0xf86, 0x5, 0x2, 0x7f, 0x7c, 0x0, 0x9, 0xfffffff8, 0x8001}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) 15:47:36 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xf67, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async, rerun: 32) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000, 0x0) (rerun: 32) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x1e, 0x2, 0xf, 0x3, 0x3, 0x7, 0x3, 0x6d}) 15:47:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000080)=""/33) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000040)=0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0xc0800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000140)=0x8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000480)={r2}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x294c40, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x3, 0x2, 0x4, 0x0, 0x6}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000400)={r4, 0x29}) syz_open_dev$dri(&(0x7f00000000c0), 0x8, 0x8281) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000380)={0x0, 0x4}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r7, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r7, 0xb101, 0x0) connect$pppoe(r7, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r8, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000004c0)={0x7, 0x8, 0xfa00, {r8, 0xf3}}, 0x10) 15:47:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x401, 0x7, {0xffffffffffffffff}, {0xee00}, 0x3, 0x7fffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x5, 0xfb4, {}, {r2}, 0x2}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x5, 0xfb4, {}, {r2}, 0x2}) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f00000000c0)={0x2, 0x3}) (async) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f00000000c0)={0x2, 0x3}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x0, 0x1, 0x42}) 15:47:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x20) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={r2}) 15:47:36 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x440600, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40200) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f00000000c0)={0x2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)) 15:47:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x401, 0x7, {0xffffffffffffffff}, {0xee00}, 0x3, 0x7fffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x5, 0xfb4, {}, {r2}, 0x2}) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f00000000c0)={0x2, 0x3}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x0, 0x1, 0x42}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x401, 0x7, {0xffffffffffffffff}, {0xee00}, 0x3, 0x7fffffffffffffff}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x5, 0xfb4, {}, {r2}, 0x2}) (async) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f00000000c0)={0x2, 0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x0, 0x1, 0x42}) (async) 15:47:36 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = socket(0x27, 0x80000, 0x3) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x404, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x53}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x15) 15:47:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000080)=""/33) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000040)=0x1) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0xc0800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000140)=0x8) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000480)={r2}) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x294c40, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x3, 0x2, 0x4, 0x0, 0x6}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000400)={r4, 0x29}) syz_open_dev$dri(&(0x7f00000000c0), 0x8, 0x8281) (async, rerun: 64) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000380)={0x0, 0x4}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r7, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r7, 0xb101, 0x0) (async) connect$pppoe(r7, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) (rerun: 32) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r8, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000004c0)={0x7, 0x8, 0xfa00, {r8, 0xf3}}, 0x10) 15:47:36 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x10080) r3 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x80540) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x2, 0x5906, 0x1f], 0x3, 0x80800}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000200)=0x1ff) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 15:47:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40200) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f00000000c0)={0x2}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)) 15:47:38 executing program 3: ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000000)={0x0, 0x1, 0x36, 0xf86, 0x5, 0x2, 0x7f, 0x7c, 0x0, 0x9, 0xfffffff8, 0x8001}) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000000)={0x0, 0x1, 0x36, 0xf86, 0x5, 0x2, 0x7f, 0x7c, 0x0, 0x9, 0xfffffff8, 0x8001}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) 15:47:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0xa}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x10080) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x80540) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x2, 0x5906, 0x1f], 0x3, 0x80800}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000200)=0x1ff) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 15:47:38 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) r1 = socket(0x27, 0x80000, 0x3) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x404, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x53}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x15) 15:47:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000080)=""/33) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000040)=0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0xc0800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000140)=0x8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000480)={r2}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x294c40, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x3, 0x2, 0x4, 0x0, 0x6}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000400)={r4, 0x29}) syz_open_dev$dri(&(0x7f00000000c0), 0x8, 0x8281) (async, rerun: 32) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000380)={0x0, 0x4}) (async) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) (rerun: 64) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r7, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r7, 0xb101, 0x0) connect$pppoe(r7, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r8, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000004c0)={0x7, 0x8, 0xfa00, {r8, 0xf3}}, 0x10) 15:47:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40200) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f00000000c0)={0x2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40200) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f00000000c0)={0x2}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)) (async) 15:47:38 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) r1 = socket(0x27, 0x80000, 0x3) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x404, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x53}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x15) 15:47:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0xa}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000140)={0x0, 0x2}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000040)=0x1ff) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) 15:47:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x10080) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x80540) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x80540) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x2, 0x5906, 0x1f], 0x3, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x2, 0x5906, 0x1f], 0x3, 0x80800}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000200)=0x1ff) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 15:47:38 executing program 2: ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000040)={0x200, 0x5, 0x1, 0x6, 0x3, 0x3, 0x7}) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0xd4250fefc1fe856b, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00104be4435e0c6d7b79d489afedce0f5d8700d58e720fd9c4611a85f6a3bdf7a419", @ANYRES16=r3, @ANYBLOB="000327bd7000ffdbdf250500000008000b000100000006001d000800000006001d003b000000"], 0x2c}, 0x1, 0x0, 0x0, 0x62c4558b74f678e9}, 0x40) 15:47:38 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0xfc}, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x8001, 0x7], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) 15:47:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x2c8bd8023f421f67, 0xffffffffffffffff}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x0, 0x1000, 0x5}) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000440)="02003f8aa1f74a621fb7d086740ee4d5d4ae3b2346692ebba263fe234075c07042280c52ffb16304211afb4924476bf43321f1e3d29960d25f01dd18e38cfa74956aff608c50ec8ef5ce513cae9c71f525aa59050a843e89c443dfea80c5d761cfa387a5444da9ee6775bcbeae0d1fe3a6fc6e5e6be2266ddfcb0fdb5d52debaa93f84dd23ed1ca597c7dd23dd6f7916583c76f3a2c78ffa24503df5c1874e73980a105b4279a163dd6d1895aaff0bb8c2ec4a3e526de78d528aa49c157a177290a6c8a72f98fd4cceba49b785856e7411bef2ced89109128071c1e8b853db4929809cab74a57d6dc2a96816978f3bb00a4699cd5fb173c0c425f2967b389f35025708a1248b7faa8ebe02e629251b9af2d5ef6b14e3c9916d47b897b0f0d56caca9ef4bc50b7fd4d17d6654645ff955bd4fb0beb158676c6d15301360f80ce7b1b728be52a062cf0a74b48bf11d22dcad77413c674b627628948130e6771eff6cfe8dd361bfcc33e7ec5ea07d6b1178a1223f2d96148518504454a3f53e8fafe020e62070e9cad4fcaba30aa313fd330900a0d0814b4779d966dce60ec546059ea4e3afdd79588fcc2b3599da1c8eca02d06dcae3d6e4c5f41fc75f0ebe2ef0e1f07f2a1f3507fcafd8f0f38f0628e57bcb301edc99c893b4ea2427", 0x1dc}) 15:47:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0xa}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000140)={0x0, 0x2}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000040)=0x1ff) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000140)={0x0, 0x2}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000040)=0x1ff) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) (async) 15:47:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0x8, 0x59}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:40 executing program 2: ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000040)={0x200, 0x5, 0x1, 0x6, 0x3, 0x3, 0x7}) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0xd4250fefc1fe856b, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00104be4435e0c6d7b79d489afedce0f5d8700d58e720fd9c4611a85f6a3bdf7a419", @ANYRES16=r3, @ANYBLOB="000327bd7000ffdbdf250500000008000b000100000006001d000800000006001d003b000000"], 0x2c}, 0x1, 0x0, 0x0, 0x62c4558b74f678e9}, 0x40) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000040)={0x200, 0x5, 0x1, 0x6, 0x3, 0x3, 0x7}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0xd4250fefc1fe856b, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00104be4435e0c6d7b79d489afedce0f5d8700d58e720fd9c4611a85f6a3bdf7a419", @ANYRES16=r3, @ANYBLOB="000327bd7000ffdbdf250500000008000b000100000006001d000800000006001d003b000000"], 0x2c}, 0x1, 0x0, 0x0, 0x62c4558b74f678e9}, 0x40) (async) 15:47:40 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0xfc}, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x8001, 0x7], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) 15:47:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x2c8bd8023f421f67, 0xffffffffffffffff}) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x0, 0x1000, 0x5}) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000440)="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", 0x1dc}) 15:47:41 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0xfc}, 0x2) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0xfc}, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x8001, 0x7], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) 15:47:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000140)={0x0, 0x2}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000040)=0x1ff) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) 15:47:41 executing program 2: ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000040)={0x200, 0x5, 0x1, 0x6, 0x3, 0x3, 0x7}) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0xd4250fefc1fe856b, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00104be4435e0c6d7b79d489afedce0f5d8700d58e720fd9c4611a85f6a3bdf7a419", @ANYRES16=r3, @ANYBLOB="000327bd7000ffdbdf250500000008000b000100000006001d000800000006001d003b000000"], 0x2c}, 0x1, 0x0, 0x0, 0x62c4558b74f678e9}, 0x40) 15:47:41 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0x8, 0x59}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000240)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0xd02, 0x8, 0x8], 0x4, 0x800, 0x0, 0xffffffffffffffff}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000100)={r4}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r7, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r7, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f00000001c0)={r8}) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000040)={0x5}) 15:47:41 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'geneve1\x00'}}, 0x1e) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) 15:47:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000240)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0xd02, 0x8, 0x8], 0x4, 0x800, 0x0, 0xffffffffffffffff}) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000100)={r4}) (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) (async) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r7, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) (async, rerun: 32) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r7, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f00000001c0)={r8}) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000040)={0x5}) (rerun: 32) 15:47:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x105000) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x6, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x589200) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x2c8bd8023f421f67, 0xffffffffffffffff}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x0, 0x1000, 0x5}) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000440)="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", 0x1dc}) 15:47:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0x8, 0x59}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:41 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'geneve1\x00'}}, 0x1e) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) 15:47:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x105000) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x6, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x589200) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x105000) (async) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x6, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x589200) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) (async) 15:47:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x5, 0x1f, 0x2, 0xc1, 0x0, 0x3, 0x80, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xcd, 0x4, @perf_config_ext={0x4daa, 0xe8}, 0x2081, 0x7fff, 0x8, 0x1, 0x9, 0x5, 0x88, 0x0, 0x3ce2, 0x0, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xa2a) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000240)={r1}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0xd02, 0x8, 0x8], 0x4, 0x800, 0x0, 0xffffffffffffffff}) (rerun: 64) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000100)={r4}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) (async, rerun: 32) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r7, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r7, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f00000001c0)={r8}) (async) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000040)={0x5}) 15:47:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x2000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x9, 0x4, 0x0, 0x2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:41 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'geneve1\x00'}}, 0x1e) (async) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'geneve1\x00'}}, 0x1e) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) 15:47:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x105000) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x6, 0x5}) (async) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x6, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x589200) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x2000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x9, 0x4, 0x0, 0x2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x2000) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x9, 0x4, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) 15:47:42 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x3d, 0x148043) 15:47:42 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000), 0x2) 15:47:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x210940, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000000c0)={r2}) [ 1731.487805] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.493542] ieee802154 phy1 wpan1: encryption failed: -22 15:47:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x5, 0x1f, 0x2, 0xc1, 0x0, 0x3, 0x80, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xcd, 0x4, @perf_config_ext={0x4daa, 0xe8}, 0x2081, 0x7fff, 0x8, 0x1, 0x9, 0x5, 0x88, 0x0, 0x3ce2, 0x0, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xa2a) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:43 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x3d, 0x148043) 15:47:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x2000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x9, 0x4, 0x0, 0x2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:43 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000), 0x2) 15:47:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x210940, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000000c0)={r2}) 15:47:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x80000, 0x2002) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:43 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000), 0x2) 15:47:43 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x3d, 0x148043) 15:47:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x210940, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async, rerun: 32) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000000c0)={r2}) (rerun: 32) 15:47:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x8, 0x3, 0xba, 0x8, 0x1], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000000c0)=""/61) 15:47:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x80000, 0x2002) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$dri(&(0x7f0000000180), 0x80000, 0x2002) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) 15:47:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x420000, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x8002af76, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x800, 0x800, 0x8], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f00000000c0)={0x8, 0x8}) 15:47:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x5, 0x1f, 0x2, 0xc1, 0x0, 0x3, 0x80, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xcd, 0x4, @perf_config_ext={0x4daa, 0xe8}, 0x2081, 0x7fff, 0x8, 0x1, 0x9, 0x5, 0x88, 0x0, 0x3ce2, 0x0, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x5, 0x1f, 0x2, 0xc1, 0x0, 0x3, 0x80, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xcd, 0x4, @perf_config_ext={0x4daa, 0xe8}, 0x2081, 0x7fff, 0x8, 0x1, 0x9, 0x5, 0x88, 0x0, 0x3ce2, 0x0, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xa2a) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:45 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) 15:47:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x80, 0x10000, 0x1, 0x22, &(0x7f0000000040)=""/34, 0xb0, &(0x7f0000000080)=""/176, 0xea, &(0x7f00000001c0)=""/234}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x3, 0x9, 0x4, 0x0, 0x4}) 15:47:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x8, 0x3, 0xba, 0x8, 0x1], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000000c0)=""/61) 15:47:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x80000, 0x2002) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async, rerun: 64) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x420000, 0x0) (rerun: 64) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x8002af76, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x800, 0x800, 0x8], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f00000000c0)={0x8, 0x8}) 15:47:45 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x3}) 15:47:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x80, 0x10000, 0x1, 0x22, &(0x7f0000000040)=""/34, 0xb0, &(0x7f0000000080)=""/176, 0xea, &(0x7f00000001c0)=""/234}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x3, 0x9, 0x4, 0x0, 0x4}) 15:47:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x8, 0x3, 0xba, 0x8, 0x1], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000000c0)=""/61) 15:47:45 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) 15:47:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x420000, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x8002af76, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x800, 0x800, 0x8], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f00000000c0)={0x8, 0x8}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x420000, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x8002af76, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x800, 0x800, 0x8], 0x3, 0x800}) (async) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f00000000c0)={0x8, 0x8}) (async) 15:47:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x80000000, 0x0, 0x2}) 15:47:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000000)) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000040)) 15:47:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x80, 0x10000, 0x1, 0x22, &(0x7f0000000040)=""/34, 0xb0, &(0x7f0000000080)=""/176, 0xea, &(0x7f00000001c0)=""/234}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x3, 0x9, 0x4, 0x0, 0x4}) 15:47:46 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) 15:47:46 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x3}) 15:47:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000040)=0x9) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x80, 0x1, 0x80}) 15:47:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x80000000, 0x0, 0x2}) 15:47:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000040)=0x9) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x80, 0x1, 0x80}) 15:47:46 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x3}) (async) 15:47:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x80000000, 0x0, 0x2}) 15:47:46 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000087238b45deadd572947b04a2fc8ea9e3a8de1f8aac59a8dcd819d45b76fb287c8e82aa4c1ef31b6474e365b207dcb7ccf427a19d57036805fbac908fdfe7130900fd0e7b95cb096f06dee0c791b6bc2e838e625b4ffdb68d70cb825c6c445c9b5429d12d072c9cad22152a36571c366c7c527bde942fb97190955cca2e5cad20076ab8aceeed3a", @ANYRES16=0x0, @ANYBLOB="00032abd7000fbdbdf250500000005001200090000000c0016000600000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) 15:47:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000040)=0x9) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x80, 0x1, 0x80}) 15:47:47 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x18}) 15:47:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) 15:47:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)) 15:47:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (async) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000000)) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000040)) 15:47:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1200000000000003, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:47 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000087238b45deadd572947b04a2fc8ea9e3a8de1f8aac59a8dcd819d45b76fb287c8e82aa4c1ef31b6474e365b207dcb7ccf427a19d57036805fbac908fdfe7130900fd0e7b95cb096f06dee0c791b6bc2e838e625b4ffdb68d70cb825c6c445c9b5429d12d072c9cad22152a36571c366c7c527bde942fb97190955cca2e5cad20076ab8aceeed3a", @ANYRES16=0x0, @ANYBLOB="00032abd7000fbdbdf250500000005001200090000000c0016000600000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000087238b45deadd572947b04a2fc8ea9e3a8de1f8aac59a8dcd819d45b76fb287c8e82aa4c1ef31b6474e365b207dcb7ccf427a19d57036805fbac908fdfe7130900fd0e7b95cb096f06dee0c791b6bc2e838e625b4ffdb68d70cb825c6c445c9b5429d12d072c9cad22152a36571c366c7c527bde942fb97190955cca2e5cad20076ab8aceeed3a", @ANYRES16=0x0, @ANYBLOB="00032abd7000fbdbdf250500000005001200090000000c0016000600000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) (async) 15:47:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (async) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000000)) (async) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000040)) 15:47:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1200000000000003, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:47 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000087238b45deadd572947b04a2fc8ea9e3a8de1f8aac59a8dcd819d45b76fb287c8e82aa4c1ef31b6474e365b207dcb7ccf427a19d57036805fbac908fdfe7130900fd0e7b95cb096f06dee0c791b6bc2e838e625b4ffdb68d70cb825c6c445c9b5429d12d072c9cad22152a36571c366c7c527bde942fb97190955cca2e5cad20076ab8aceeed3a", @ANYRES16=0x0, @ANYBLOB="00032abd7000fbdbdf250500000005001200090000000c0016000600000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) 15:47:47 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x18}) 15:47:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)) (async) 15:47:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1200000000000003, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:47 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x268201, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:47 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000040)={0x1}) 15:47:47 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x18}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x18}) (async) 15:47:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)) 15:47:47 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000040)={0x1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000040)={0x1}) (async) 15:47:47 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x268201, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x268201, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) 15:47:48 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x6d7d, 0x70d103) 15:47:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x105000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000040)={0xb25, 0x2, 0xffff}) 15:47:48 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000040)={0x1}) 15:47:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={0x0, 0x4}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000140)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$NBD_SET_SIZE_BLOCKS(r5, 0xab07, 0x0) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x9) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000040)={0x2a298, 0x2}) 15:47:48 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x268201, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1000, 0x9, 0x2, 0x400, 0x1, 0x6, 0x3f, 0x6, 0x3f, 0x0], 0xa, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000140)={0x5db}) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f00000000c0)={0x4, 0x0, 0x2, 0x7}) 15:47:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x105000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000040)={0xb25, 0x2, 0xffff}) 15:47:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000040)={0x3}) 15:47:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={0x0, 0x4}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000140)) (async) ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000140)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$NBD_SET_SIZE_BLOCKS(r5, 0xab07, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r5, 0xab07, 0x0) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x9) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000040)={0x2a298, 0x2}) 15:47:48 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x6d7d, 0x70d103) 15:47:48 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0xc100, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[{}, {}], 0x0, 0x0, '\x00', 0x3, 0x2}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000080)={r2, 0x2}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x105000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000040)={0xb25, 0x2, 0xffff}) 15:47:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={0x0, 0x4}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000140)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async, rerun: 32) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$NBD_SET_SIZE_BLOCKS(r5, 0xab07, 0x0) (async) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x9) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000040)={0x2a298, 0x2}) 15:47:48 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0xc100, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0xc100, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[{}, {}], 0x0, 0x0, '\x00', 0x3, 0x2}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000080)={r2, 0x2}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000040)={0x3}) 15:47:48 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x6d7d, 0x70d103) 15:47:48 executing program 0: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000040)={0x5}) 15:47:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1000, 0x9, 0x2, 0x400, 0x1, 0x6, 0x3f, 0x6, 0x3f, 0x0], 0xa, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000140)={0x5db}) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f00000000c0)={0x4, 0x0, 0x2, 0x7}) 15:47:49 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0xc100, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[{}, {}], 0x0, 0x0, '\x00', 0x3, 0x2}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000080)={r2, 0x2}) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000040)={0x3}) (rerun: 32) 15:47:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002980)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002940)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000029c0)={0x5, 0x10, 0xfa00, {&(0x7f0000002740), r3}}, 0x18) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000140)={0x8, &(0x7f0000000040)=""/85, &(0x7f00000025c0)=[{0x78, 0x5d, 0x1ff, &(0x7f00000000c0)=""/93}, {0x3, 0x4b, 0xfffffffa, &(0x7f00000001c0)=""/75}, {0x7, 0xef, 0xffff, &(0x7f0000000240)=""/239}, {0x7, 0x1000, 0x0, &(0x7f0000000340)=""/4096}, {0x7f, 0x89, 0x1, &(0x7f0000001340)=""/137}, {0x10001, 0x82, 0x9, &(0x7f0000001400)=""/130}, {0x4, 0x1000, 0xef, &(0x7f00000014c0)=""/4096}, {0x5, 0xc6, 0xc19, &(0x7f00000024c0)=""/198}]}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002680), 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000002700)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c010}, 0x24000000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000040)=0x7db) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:49 executing program 0: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000040)={0x5}) 15:47:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002980)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002940)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000029c0)={0x5, 0x10, 0xfa00, {&(0x7f0000002740), r3}}, 0x18) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000140)={0x8, &(0x7f0000000040)=""/85, &(0x7f00000025c0)=[{0x78, 0x5d, 0x1ff, &(0x7f00000000c0)=""/93}, {0x3, 0x4b, 0xfffffffa, &(0x7f00000001c0)=""/75}, {0x7, 0xef, 0xffff, &(0x7f0000000240)=""/239}, {0x7, 0x1000, 0x0, &(0x7f0000000340)=""/4096}, {0x7f, 0x89, 0x1, &(0x7f0000001340)=""/137}, {0x10001, 0x82, 0x9, &(0x7f0000001400)=""/130}, {0x4, 0x1000, 0xef, &(0x7f00000014c0)=""/4096}, {0x5, 0xc6, 0xc19, &(0x7f00000024c0)=""/198}]}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002680), 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000002700)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c010}, 0x24000000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002980)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002940), 0x106, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000029c0)={0x5, 0x10, 0xfa00, {&(0x7f0000002740), r3}}, 0x18) (async) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000140)={0x8, &(0x7f0000000040)=""/85, &(0x7f00000025c0)=[{0x78, 0x5d, 0x1ff, &(0x7f00000000c0)=""/93}, {0x3, 0x4b, 0xfffffffa, &(0x7f00000001c0)=""/75}, {0x7, 0xef, 0xffff, &(0x7f0000000240)=""/239}, {0x7, 0x1000, 0x0, &(0x7f0000000340)=""/4096}, {0x7f, 0x89, 0x1, &(0x7f0000001340)=""/137}, {0x10001, 0x82, 0x9, &(0x7f0000001400)=""/130}, {0x4, 0x1000, 0xef, &(0x7f00000014c0)=""/4096}, {0x5, 0xc6, 0xc19, &(0x7f00000024c0)=""/198}]}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002680), 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000002700)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c010}, 0x24000000) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) 15:47:49 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000780)={0x8, &(0x7f00000001c0)=""/234, &(0x7f00000006c0)=[{0x3f, 0x71, 0x81, &(0x7f0000000100)=""/113}, {0x1, 0xe1, 0x0, &(0x7f00000002c0)=""/225}, {0xfffffff8, 0x3b, 0x9, &(0x7f00000003c0)=""/59}, {0x5, 0x64, 0xc5, &(0x7f0000000400)=""/100}, {0x1f, 0x4c, 0xffff9ddf, &(0x7f0000000480)=""/76}, {0x1c, 0x97, 0x3, &(0x7f0000000500)=""/151}, {0x3, 0x5b, 0x9, &(0x7f00000005c0)=""/91}, {0x20d1, 0x46, 0xfffffff7, &(0x7f0000000640)=""/70}]}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) 15:47:49 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) 15:47:49 executing program 0: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000040)={0x5}) 15:47:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000040)=0x7db) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:49 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) 15:47:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x588883) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:47:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1000, 0x9, 0x2, 0x400, 0x1, 0x6, 0x3f, 0x6, 0x3f, 0x0], 0xa, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000140)={0x5db}) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f00000000c0)={0x4, 0x0, 0x2, 0x7}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1000, 0x9, 0x2, 0x400, 0x1, 0x6, 0x3f, 0x6, 0x3f, 0x0], 0xa}) (async) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000140)={0x5db}) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f00000000c0)={0x4, 0x0, 0x2, 0x7}) (async) 15:47:50 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000780)={0x8, &(0x7f00000001c0)=""/234, &(0x7f00000006c0)=[{0x3f, 0x71, 0x81, &(0x7f0000000100)=""/113}, {0x1, 0xe1, 0x0, &(0x7f00000002c0)=""/225}, {0xfffffff8, 0x3b, 0x9, &(0x7f00000003c0)=""/59}, {0x5, 0x64, 0xc5, &(0x7f0000000400)=""/100}, {0x1f, 0x4c, 0xffff9ddf, &(0x7f0000000480)=""/76}, {0x1c, 0x97, 0x3, &(0x7f0000000500)=""/151}, {0x3, 0x5b, 0x9, &(0x7f00000005c0)=""/91}, {0x20d1, 0x46, 0xfffffff7, &(0x7f0000000640)=""/70}]}) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) 15:47:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002980)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002940)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000029c0)={0x5, 0x10, 0xfa00, {&(0x7f0000002740), r3}}, 0x18) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000140)={0x8, &(0x7f0000000040)=""/85, &(0x7f00000025c0)=[{0x78, 0x5d, 0x1ff, &(0x7f00000000c0)=""/93}, {0x3, 0x4b, 0xfffffffa, &(0x7f00000001c0)=""/75}, {0x7, 0xef, 0xffff, &(0x7f0000000240)=""/239}, {0x7, 0x1000, 0x0, &(0x7f0000000340)=""/4096}, {0x7f, 0x89, 0x1, &(0x7f0000001340)=""/137}, {0x10001, 0x82, 0x9, &(0x7f0000001400)=""/130}, {0x4, 0x1000, 0xef, &(0x7f00000014c0)=""/4096}, {0x5, 0xc6, 0xc19, &(0x7f00000024c0)=""/198}]}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002680), 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000002700)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c010}, 0x24000000) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:50 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) 15:47:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000040)=0x7db) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x588883) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:47:50 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000780)={0x8, &(0x7f00000001c0)=""/234, &(0x7f00000006c0)=[{0x3f, 0x71, 0x81, &(0x7f0000000100)=""/113}, {0x1, 0xe1, 0x0, &(0x7f00000002c0)=""/225}, {0xfffffff8, 0x3b, 0x9, &(0x7f00000003c0)=""/59}, {0x5, 0x64, 0xc5, &(0x7f0000000400)=""/100}, {0x1f, 0x4c, 0xffff9ddf, &(0x7f0000000480)=""/76}, {0x1c, 0x97, 0x3, &(0x7f0000000500)=""/151}, {0x3, 0x5b, 0x9, &(0x7f00000005c0)=""/91}, {0x20d1, 0x46, 0xfffffff7, &(0x7f0000000640)=""/70}]}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) (async, rerun: 64) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) 15:47:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x40000000, 0xeacb, 0x3ffc00000000}) 15:47:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x5}) 15:47:50 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) 15:47:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x588883) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:47:52 executing program 3: ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="00ff00004f7f2bae12686d00"/25, 0x19}) 15:47:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000012c0), 0x20d42, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000013c0)={&(0x7f0000001300)=[0x0, 0x0, 0x0], &(0x7f0000001340)=[{}, {}], 0x5, 0x0, '\x00', 0x3, 0x2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0xc8d, 0x8, 0x9, 0xf9, &(0x7f0000000040)=""/249, 0x1000, &(0x7f00000001c0)=""/4096, 0xf6, &(0x7f00000011c0)=""/246}) 15:47:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x5}) (rerun: 32) 15:47:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x40000000, 0xeacb, 0x3ffc00000000}) 15:47:52 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) 15:47:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000000c0)={0x0, 0x6}) ioctl$RTC_WIE_OFF(r1, 0x7010) 15:47:52 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000012c0), 0x20d42, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000013c0)={&(0x7f0000001300)=[0x0, 0x0, 0x0], &(0x7f0000001340)=[{}, {}], 0x5, 0x0, '\x00', 0x3, 0x2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0xc8d, 0x8, 0x9, 0xf9, &(0x7f0000000040)=""/249, 0x1000, &(0x7f00000001c0)=""/4096, 0xf6, &(0x7f00000011c0)=""/246}) 15:47:52 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) (async) 15:47:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x5}) 15:47:52 executing program 3: ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) (async) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="00ff00004f7f2bae12686d00"/25, 0x19}) 15:47:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000000c0)={0x0, 0x6}) ioctl$RTC_WIE_OFF(r1, 0x7010) 15:47:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x40000000, 0xeacb, 0x3ffc00000000}) 15:47:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000000c0)={0x0, 0x6}) ioctl$RTC_WIE_OFF(r1, 0x7010) 15:47:52 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x25c801, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000012c0), 0x20d42, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000013c0)={&(0x7f0000001300)=[0x0, 0x0, 0x0], &(0x7f0000001340)=[{}, {}], 0x5, 0x0, '\x00', 0x3, 0x2}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0xc8d, 0x8, 0x9, 0xf9, &(0x7f0000000040)=""/249, 0x1000, &(0x7f00000001c0)=""/4096, 0xf6, &(0x7f00000011c0)=""/246}) 15:47:52 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x500, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4048001) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000100)) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) 15:47:52 executing program 3: ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="00ff00004f7f2bae12686d00"/25, 0x19}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="00ff00004f7f2bae12686d00"/25, 0x19}) 15:47:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x22400) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000040)={0x9, 0x9}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000002c0)=r4) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000001c0)="237119090d6bd8149b484f80445f9812c3110651dc3925439d9d1fe039b63f6bb8270628d1c8d99af0936b6c5a849da075646a6b2e5d6fabff90d841f23f66f2cb695b722adaf208c5b1fe58377053a8e4caa2bcc535e6493ddaf0a16a4b04d91c58eac22d4f0012bc8f8de4a29a3f5cfd7cc1309e2542374a1e5675cb20f820b96020569e4a2016647efd29a03390bd7dd35476a2fba49e951ad4ba4d1986530419b94795787838761e8588d457f8a064406ef6dbf49e32fa64ca4d847592f4eaeced863fed22496fd1e3ba51a065d88150193a6e9d6639382d76d3a7739fe944b39e36df98d2df", 0xe8}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) 15:47:52 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x25c801, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x25c801, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) 15:47:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x2300c0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/207}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) 15:47:52 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x500, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4048001) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000100)) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x500, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4048001) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000100)) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) (async) 15:47:52 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000100)="0fbf9b5bcfbe44aab1b8a23fa93057e6b86b8373d77063a954b876ce4aaea60dec72288f3eaea32e1088ca76cb57e973dbb154c1163ad353dced308b7ba1110f567f16548ceeeb65d9c81a481bdffc3c8189", 0x52}) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x1f, 0x412a00) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f00000002c0)={0x8, 0xd171, 0x7c, 0xff}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r3}) 15:47:52 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 15:47:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x22400) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000040)={0x9, 0x9}) (async) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000040)={0x9, 0x9}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000002c0)=r4) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000001c0)="237119090d6bd8149b484f80445f9812c3110651dc3925439d9d1fe039b63f6bb8270628d1c8d99af0936b6c5a849da075646a6b2e5d6fabff90d841f23f66f2cb695b722adaf208c5b1fe58377053a8e4caa2bcc535e6493ddaf0a16a4b04d91c58eac22d4f0012bc8f8de4a29a3f5cfd7cc1309e2542374a1e5675cb20f820b96020569e4a2016647efd29a03390bd7dd35476a2fba49e951ad4ba4d1986530419b94795787838761e8588d457f8a064406ef6dbf49e32fa64ca4d847592f4eaeced863fed22496fd1e3ba51a065d88150193a6e9d6639382d76d3a7739fe944b39e36df98d2df", 0xe8}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) getsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) 15:47:52 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x25c801, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x25c801, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:52 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x2300c0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x2300c0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/207}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/207}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) 15:47:52 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x500, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4048001) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000100)) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) 15:47:52 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 15:47:52 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000100)="0fbf9b5bcfbe44aab1b8a23fa93057e6b86b8373d77063a954b876ce4aaea60dec72288f3eaea32e1088ca76cb57e973dbb154c1163ad353dced308b7ba1110f567f16548ceeeb65d9c81a481bdffc3c8189", 0x52}) syz_open_dev$loop(&(0x7f0000000280), 0x1f, 0x412a00) (async) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x1f, 0x412a00) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f00000002c0)={0x8, 0xd171, 0x7c, 0xff}) (async) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f00000002c0)={0x8, 0xd171, 0x7c, 0xff}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r3}) 15:47:52 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x22400) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x22400) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000040)={0x9, 0x9}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000002c0)=r4) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000001c0)="237119090d6bd8149b484f80445f9812c3110651dc3925439d9d1fe039b63f6bb8270628d1c8d99af0936b6c5a849da075646a6b2e5d6fabff90d841f23f66f2cb695b722adaf208c5b1fe58377053a8e4caa2bcc535e6493ddaf0a16a4b04d91c58eac22d4f0012bc8f8de4a29a3f5cfd7cc1309e2542374a1e5675cb20f820b96020569e4a2016647efd29a03390bd7dd35476a2fba49e951ad4ba4d1986530419b94795787838761e8588d457f8a064406ef6dbf49e32fa64ca4d847592f4eaeced863fed22496fd1e3ba51a065d88150193a6e9d6639382d76d3a7739fe944b39e36df98d2df", 0xe8}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000001c0)="237119090d6bd8149b484f80445f9812c3110651dc3925439d9d1fe039b63f6bb8270628d1c8d99af0936b6c5a849da075646a6b2e5d6fabff90d841f23f66f2cb695b722adaf208c5b1fe58377053a8e4caa2bcc535e6493ddaf0a16a4b04d91c58eac22d4f0012bc8f8de4a29a3f5cfd7cc1309e2542374a1e5675cb20f820b96020569e4a2016647efd29a03390bd7dd35476a2fba49e951ad4ba4d1986530419b94795787838761e8588d457f8a064406ef6dbf49e32fa64ca4d847592f4eaeced863fed22496fd1e3ba51a065d88150193a6e9d6639382d76d3a7739fe944b39e36df98d2df", 0xe8}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) 15:47:52 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) socket$inet_udplite(0x2, 0x2, 0x88) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0xfb}, 0x2) 15:47:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x2300c0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/207}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) 15:47:52 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 15:47:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x270402) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000001c0)={0x2, 0x0, [{0x1000, 0x62, &(0x7f0000000040)=""/98}, {0x0, 0x61, &(0x7f00000000c0)=""/97}]}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x6}) 15:47:53 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) (async, rerun: 64) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000100)="0fbf9b5bcfbe44aab1b8a23fa93057e6b86b8373d77063a954b876ce4aaea60dec72288f3eaea32e1088ca76cb57e973dbb154c1163ad353dced308b7ba1110f567f16548ceeeb65d9c81a481bdffc3c8189", 0x52}) (async, rerun: 64) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x1f, 0x412a00) (rerun: 64) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f00000002c0)={0x8, 0xd171, 0x7c, 0xff}) (async, rerun: 32) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r3}) 15:47:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xcfffffffffe, 0x40000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000100)={r2, 0x1}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000040)=0x8db1) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000880)={0x0, 0x2, 0x0, &(0x7f00000001c0)=[{}, {}], 0xa, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000800)=[{}, {}]}) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000140)) 15:47:53 executing program 0: syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffe, 0x0) 15:47:53 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0xfb}, 0x2) 15:47:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x270402) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000001c0)={0x2, 0x0, [{0x1000, 0x62, &(0x7f0000000040)=""/98}, {0x0, 0x61, &(0x7f00000000c0)=""/97}]}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x6}) 15:47:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x400000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)) 15:47:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r4, 0x8008af73, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000240)) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x20c280, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r7, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r7, 0x4008af14, &(0x7f00000025c0)) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, &(0x7f0000000300)) ioctl$DRM_IOCTL_MAP_BUFS(r6, 0xc0186419, &(0x7f0000002580)={0x4, &(0x7f0000000340)=""/208, &(0x7f0000002500)=[{0x6, 0x1000, 0x0, &(0x7f0000000440)=""/4096}, {0xba09, 0x2b, 0x0, &(0x7f0000001440)=""/43}, {0xfff, 0x1000, 0xce83, &(0x7f0000001480)=""/4096}, {0x5, 0x6, 0xffff1c0e, &(0x7f00000024c0)=""/6}]}) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x7], 0x1, 0xc00}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xcfffffffffe, 0x40000) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000100)={r2, 0x1}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000040)=0x8db1) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000880)={0x0, 0x2, 0x0, &(0x7f00000001c0)=[{}, {}], 0xa, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000800)=[{}, {}]}) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000140)) 15:47:53 executing program 0: syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffe, 0x0) 15:47:53 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) socket$inet_udplite(0x2, 0x2, 0x88) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0xfb}, 0x2) 15:47:53 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x270402) (async) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x270402) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000001c0)={0x2, 0x0, [{0x1000, 0x62, &(0x7f0000000040)=""/98}, {0x0, 0x61, &(0x7f00000000c0)=""/97}]}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x6}) 15:47:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x400000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)) (rerun: 32) 15:47:53 executing program 0: syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffe, 0x0) 15:47:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xcfffffffffe, 0x40000) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000100)={r2, 0x1}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000040)=0x8db1) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000880)={0x0, 0x2, 0x0, &(0x7f00000001c0)=[{}, {}], 0xa, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000800)=[{}, {}]}) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000140)) 15:47:53 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x400c040) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0xd4c00, 0x0) 15:47:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x400000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)) 15:47:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x4100, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0xffff, 0x8000000, 0x3}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x10}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000100)={0x1, 0x9, 0x8}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)) 15:47:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r4, 0x8008af73, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000240)) (async) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x20c280, 0x0) (async) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r7, 0x8008af73, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r7, 0x4008af14, &(0x7f00000025c0)) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, &(0x7f0000000300)) ioctl$DRM_IOCTL_MAP_BUFS(r6, 0xc0186419, &(0x7f0000002580)={0x4, &(0x7f0000000340)=""/208, &(0x7f0000002500)=[{0x6, 0x1000, 0x0, &(0x7f0000000440)=""/4096}, {0xba09, 0x2b, 0x0, &(0x7f0000001440)=""/43}, {0xfff, 0x1000, 0xce83, &(0x7f0000001480)=""/4096}, {0x5, 0x6, 0xffff1c0e, &(0x7f00000024c0)=""/6}]}) (async) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x7], 0x1, 0xc00}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 15:47:54 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x400c040) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x400c040) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0xd4c00, 0x0) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0xd4c00, 0x0) 15:47:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xedd2, 0x40) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x4, 0x101, 0x100}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f00000000c0)=0x40) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000001c0)="d4f98a5be05b6e78d5ce7ace84bc9fa40a9b95019a8a4e9433435d5a9821911935b0965b38239ad0b15a2612f76fd7be630613f96b1ea731411529758fd669a27d087e539286e01725b9135b3e167b5406ed81551e6811b19657f7a7c2dc0fd0a8671a16283409a5ae0eacab5660ac6f62af8f60e4d500507df944638c5858a0babcbfe632fedad37853c4a35c5e8f05f4ce9e857b719188d63ef39c88849afb05b6bbc545", 0xa5}) 15:47:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x4100, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0xffff, 0x8000000, 0x3}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x10}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000100)={0x1, 0x9, 0x8}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x4100, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0xffff, 0x8000000, 0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x10}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000100)={0x1, 0x9, 0x8}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)) (async) 15:47:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xedd2, 0x40) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x4, 0x101, 0x100}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f00000000c0)=0x40) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000001c0)="d4f98a5be05b6e78d5ce7ace84bc9fa40a9b95019a8a4e9433435d5a9821911935b0965b38239ad0b15a2612f76fd7be630613f96b1ea731411529758fd669a27d087e539286e01725b9135b3e167b5406ed81551e6811b19657f7a7c2dc0fd0a8671a16283409a5ae0eacab5660ac6f62af8f60e4d500507df944638c5858a0babcbfe632fedad37853c4a35c5e8f05f4ce9e857b719188d63ef39c88849afb05b6bbc545", 0xa5}) 15:47:54 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x400c040) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 15:47:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0xd4c00, 0x0) 15:47:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x4100, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0xffff, 0x8000000, 0x3}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x10}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000100)={0x1, 0x9, 0x8}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)) 15:47:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xedd2, 0x40) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x4, 0x101, 0x100}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f00000000c0)=0x40) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000001c0)="d4f98a5be05b6e78d5ce7ace84bc9fa40a9b95019a8a4e9433435d5a9821911935b0965b38239ad0b15a2612f76fd7be630613f96b1ea731411529758fd669a27d087e539286e01725b9135b3e167b5406ed81551e6811b19657f7a7c2dc0fd0a8671a16283409a5ae0eacab5660ac6f62af8f60e4d500507df944638c5858a0babcbfe632fedad37853c4a35c5e8f05f4ce9e857b719188d63ef39c88849afb05b6bbc545", 0xa5}) 15:47:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r4, 0x8008af73, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000240)) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x20c280, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r7, 0x8008af73, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r7, 0x4008af14, &(0x7f00000025c0)) (async) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, &(0x7f0000000300)) ioctl$DRM_IOCTL_MAP_BUFS(r6, 0xc0186419, &(0x7f0000002580)={0x4, &(0x7f0000000340)=""/208, &(0x7f0000002500)=[{0x6, 0x1000, 0x0, &(0x7f0000000440)=""/4096}, {0xba09, 0x2b, 0x0, &(0x7f0000001440)=""/43}, {0xfff, 0x1000, 0xce83, &(0x7f0000001480)=""/4096}, {0x5, 0x6, 0xffff1c0e, &(0x7f00000024c0)=""/6}]}) (async) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x7], 0x1, 0xc00}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) (async) 15:47:55 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) recvfrom$l2tp(r0, &(0x7f0000000180)=""/67, 0x43, 0x0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) getsockname$l2tp(r2, &(0x7f0000000000), &(0x7f0000000200)=0x10) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000140)) 15:47:55 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x5, 0x0, 0x1}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f00000000c0)) 15:47:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x5, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x5, 0x0, 0x1}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f00000000c0)) 15:47:55 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:55 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) recvfrom$l2tp(r0, &(0x7f0000000180)=""/67, 0x43, 0x0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) getsockname$l2tp(r2, &(0x7f0000000000), &(0x7f0000000200)=0x10) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000140)) 15:47:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x2, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000080)={r1, 0x7fff}) 15:47:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xfffffbfffffffffa, 0x218080) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)="cded35d683b83d9ec7f80d9a8e8318eb4d43de70911882c46c4ad5cea4e4afd57d09ba8503bd6c3c8478ea5db33960ff9a4680b53acc96081edbba26a8627abed862d2f93fd3c958ca3329331626525c8ef1aedc29870b69e351abb753045ab595e6d914a7c3a3d8a88bd01ec1e50be756a3fc205b5a4a8ae9c280cf89f626eededccd3289dc0fa6bf279fdd2ada5b59f0dd57a1139882efb95fc9953ddfd3aac369c6513272919bd120157c8e5047b281f59fc8c7680c59ab1f1be01aaef3163a99aeae1836daccc4c089aea764a8a00fb7f8f0c2fe99835b", 0xd9}) 15:47:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x5, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f00000000c0)) 15:47:56 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x2, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000080)={r1, 0x7fff}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x2, 0x0, 0x1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f00000001c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)={r3}) (async) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000080)={r1, 0x7fff}) (async) 15:47:56 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) recvfrom$l2tp(r0, &(0x7f0000000180)=""/67, 0x43, 0x0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) getsockname$l2tp(r2, &(0x7f0000000000), &(0x7f0000000200)=0x10) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000140)) 15:47:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x208000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x1, 0x2, 0xfffffffa, 0xef, 0x20, 0xa4f, 0x1000}) 15:47:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x208000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x1, 0x2, 0xfffffffa, 0xef, 0x20, 0xa4f, 0x1000}) 15:47:56 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48003, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x3, 0x44200, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x72b, 0x2, @perf_config_ext={0x1, 0x100000001}, 0x8800, 0x6, 0xfffffffd, 0x6, 0x1, 0x1c5, 0x7, 0x0, 0xfffffe00, 0x0, 0x81}, 0x0, 0x2, r1, 0x2) 15:47:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x80000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x5}) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000080)={0x675, 0x1, 0x6, 0x200, 0x1, 0x2}) 15:47:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x2, 0x0, 0x1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000080)={r1, 0x7fff}) 15:47:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xfffffbfffffffffa, 0x218080) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)="cded35d683b83d9ec7f80d9a8e8318eb4d43de70911882c46c4ad5cea4e4afd57d09ba8503bd6c3c8478ea5db33960ff9a4680b53acc96081edbba26a8627abed862d2f93fd3c958ca3329331626525c8ef1aedc29870b69e351abb753045ab595e6d914a7c3a3d8a88bd01ec1e50be756a3fc205b5a4a8ae9c280cf89f626eededccd3289dc0fa6bf279fdd2ada5b59f0dd57a1139882efb95fc9953ddfd3aac369c6513272919bd120157c8e5047b281f59fc8c7680c59ab1f1be01aaef3163a99aeae1836daccc4c089aea764a8a00fb7f8f0c2fe99835b", 0xd9}) syz_open_dev$dri(&(0x7f0000000180), 0xfffffbfffffffffa, 0x218080) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)="cded35d683b83d9ec7f80d9a8e8318eb4d43de70911882c46c4ad5cea4e4afd57d09ba8503bd6c3c8478ea5db33960ff9a4680b53acc96081edbba26a8627abed862d2f93fd3c958ca3329331626525c8ef1aedc29870b69e351abb753045ab595e6d914a7c3a3d8a88bd01ec1e50be756a3fc205b5a4a8ae9c280cf89f626eededccd3289dc0fa6bf279fdd2ada5b59f0dd57a1139882efb95fc9953ddfd3aac369c6513272919bd120157c8e5047b281f59fc8c7680c59ab1f1be01aaef3163a99aeae1836daccc4c089aea764a8a00fb7f8f0c2fe99835b", 0xd9}) (async) 15:47:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x208000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x1, 0x2, 0xfffffffa, 0xef, 0x20, 0xa4f, 0x1000}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x1, 0x2, 0xfffffffa, 0xef, 0x20, 0xa4f, 0x1000}) 15:47:56 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48003, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x3, 0x44200, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x72b, 0x2, @perf_config_ext={0x1, 0x100000001}, 0x8800, 0x6, 0xfffffffd, 0x6, 0x1, 0x1c5, 0x7, 0x0, 0xfffffe00, 0x0, 0x81}, 0x0, 0x2, r1, 0x2) 15:47:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x80000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x5}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000080)={0x675, 0x1, 0x6, 0x200, 0x1, 0x2}) 15:47:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xfffffbfffffffffa, 0x218080) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)="cded35d683b83d9ec7f80d9a8e8318eb4d43de70911882c46c4ad5cea4e4afd57d09ba8503bd6c3c8478ea5db33960ff9a4680b53acc96081edbba26a8627abed862d2f93fd3c958ca3329331626525c8ef1aedc29870b69e351abb753045ab595e6d914a7c3a3d8a88bd01ec1e50be756a3fc205b5a4a8ae9c280cf89f626eededccd3289dc0fa6bf279fdd2ada5b59f0dd57a1139882efb95fc9953ddfd3aac369c6513272919bd120157c8e5047b281f59fc8c7680c59ab1f1be01aaef3163a99aeae1836daccc4c089aea764a8a00fb7f8f0c2fe99835b", 0xd9}) 15:47:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)) 15:47:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x11}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000200)={0x7, 0x2, 0xffffffff, 0x5, 0x13, 0x3}) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000000)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) connect$pppoe(r5, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r6, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x85b, 0x3ff, "06ecd1abc38f256f72d63b5abe119c2b1b26931f0b3719dfc6686a55f9d987bc2957bc18ab4b1320c31bb48f80c29936d687a31af8788f33ba33d55057f13752b07d8e4c850d610350fe103ee3cdbaa8854dd6fcb15f4c62e56e83e9985ff75d6f748945620662d79ce63802c3bd1c0e6e773a68a6d0b17349ad2b22b07285327b563ec0812174ccf07c51dc6c63d4959a2b4aa27df18463ee3b81a4c5f604fa2b78c099df6c466b0a0643d63a527db38749a1d235374227b00ffe5dce772d398b0198ca2239e2f0c0917fee78b2b200f5d89cd8b1460627839ae4ada432b10a5f70843867c2d678371d3ff9dc4c8f7121d053562444b30fc73644d58cb50b07", 0x8, 0x1, 0x1e, 0x7f, 0x8, 0x7f, 0x40, 0x1}, r6}}, 0x120) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x8903, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x2, 0x1000, 0x5}) 15:47:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x80000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x5}) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000080)={0x675, 0x1, 0x6, 0x200, 0x1, 0x2}) syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x80000) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x5}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000080)={0x675, 0x1, 0x6, 0x200, 0x1, 0x2}) (async) 15:47:56 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48003, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x3, 0x44200, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x72b, 0x2, @perf_config_ext={0x1, 0x100000001}, 0x8800, 0x6, 0xfffffffd, 0x6, 0x1, 0x1c5, 0x7, 0x0, 0xfffffe00, 0x0, 0x81}, 0x0, 0x2, r1, 0x2) 15:47:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:47:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x34081) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)) 15:47:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x11}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000200)={0x7, 0x2, 0xffffffff, 0x5, 0x13, 0x3}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000000)={0x0, 0x33}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) (async) connect$pppoe(r5, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r6, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x85b, 0x3ff, "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", 0x8, 0x1, 0x1e, 0x7f, 0x8, 0x7f, 0x40, 0x1}, r6}}, 0x120) (async) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x8903, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x2, 0x1000, 0x5}) 15:47:57 executing program 2: ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000040)={0x0, 0x6, 0x2, 0x5, 0x8, 0x5}) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:57 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x165cc1, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x34081) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)) (async) 15:47:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={0x0, 0x2}) 15:47:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async, rerun: 32) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x11}) (rerun: 32) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000200)={0x7, 0x2, 0xffffffff, 0x5, 0x13, 0x3}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000000)={0x0, 0x33}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async, rerun: 32) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) connect$pppoe(r5, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r6, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x85b, 0x3ff, "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", 0x8, 0x1, 0x1e, 0x7f, 0x8, 0x7f, 0x40, 0x1}, r6}}, 0x120) (async, rerun: 64) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x8903, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x2, 0x1000, 0x5}) 15:47:57 executing program 2: ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000040)={0x0, 0x6, 0x2, 0x5, 0x8, 0x5}) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x34081) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:57 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x165cc1, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={0x0, 0x2}) 15:47:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0x4, 0x6, 0x0, 0x0}) r2 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x6, 0x2, 0x1f], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYRES8=r4], 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000002c0)={0x0, 0x9, 0x5, 0x1f}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x1, 0x4, 0x1, 0xd2, 0x7fff, 0x2, 0x401], 0x7, 0x40000, 0x0, 0xffffffffffffffff}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000580)={0x4, 0xffff8000, 0x9}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) r8 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000480), 0xfff, 0x181082) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f00000004c0)={r1}) ioctl$BLKIOOPT(r8, 0x1279, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r7, 0xb}}, 0x10) 15:47:57 executing program 2: ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000040)={0x0, 0x6, 0x2, 0x5, 0x8, 0x5}) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x2}) 15:47:57 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x10}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={0x0, 0x2}) (async) 15:47:57 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x165cc1, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:47:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0x4, 0x6, 0x0, 0x0}) r2 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x6, 0x2, 0x1f], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYRES8=r4], 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000002c0)={0x0, 0x9, 0x5, 0x1f}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x1, 0x4, 0x1, 0xd2, 0x7fff, 0x2, 0x401], 0x7, 0x40000, 0x0, 0xffffffffffffffff}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000580)={0x4, 0xffff8000, 0x9}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) r8 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000480), 0xfff, 0x181082) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f00000004c0)={r1}) ioctl$BLKIOOPT(r8, 0x1279, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r7, 0xb}}, 0x10) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0x4, 0x6}) (async) syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x6, 0x2, 0x1f], 0x3, 0x80800}) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYRES8=r4], 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) (async) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000002c0)={0x0, 0x9, 0x5, 0x1f}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x1, 0x4, 0x1, 0xd2, 0x7fff, 0x2, 0x401], 0x7, 0x40000}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000580)={0x4, 0xffff8000, 0x9}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000480), 0xfff, 0x181082) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f00000004c0)={r1}) (async) ioctl$BLKIOOPT(r8, 0x1279, &(0x7f00000000c0)) (async) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r7, 0xb}}, 0x10) (async) 15:47:57 executing program 2: ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000040)=""/177, &(0x7f0000000100)=""/108, &(0x7f00000001c0)=""/107, 0x100000}) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:57 executing program 4: ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000080)=0x3) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x8000, 0xdd, 0x9, 0x1], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$RTC_UIE_ON(r1, 0x7003) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000440)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, '\x00', 0x9, 0xa}) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000140)={0x1, 0x8}) 15:47:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x2}) (rerun: 32) 15:47:57 executing program 1: ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000200)={0x2, 0x5}) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000040)={0x12}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x200, 0x3c, 0x7fff, 0x8000], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) 15:47:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0x4, 0x6, 0x0, 0x0}) (async, rerun: 64) r2 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x6, 0x2, 0x1f], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) (async) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYRES8=r4], 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000002c0)={0x0, 0x9, 0x5, 0x1f}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x1, 0x4, 0x1, 0xd2, 0x7fff, 0x2, 0x401], 0x7, 0x40000, 0x0, 0xffffffffffffffff}) (async) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000580)={0x4, 0xffff8000, 0x9}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) (async, rerun: 32) r8 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r9 = syz_open_dev$dri(&(0x7f0000000480), 0xfff, 0x181082) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f00000004c0)={r1}) ioctl$BLKIOOPT(r8, 0x1279, &(0x7f00000000c0)) (async) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r7, 0xb}}, 0x10) 15:47:57 executing program 2: ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000040)=""/177, &(0x7f0000000100)=""/108, &(0x7f00000001c0)=""/107, 0x100000}) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:57 executing program 4: ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000080)=0x3) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x8000, 0xdd, 0x9, 0x1], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$RTC_UIE_ON(r1, 0x7003) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) (async) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000440)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, '\x00', 0x9, 0xa}) (async, rerun: 64) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) (rerun: 64) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) (async) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000180)) (async, rerun: 32) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000140)={0x1, 0x8}) (rerun: 32) 15:47:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x2}) (async) 15:47:58 executing program 2: ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000040)=""/177, &(0x7f0000000100)=""/108, &(0x7f00000001c0)=""/107, 0x100000}) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:47:58 executing program 1: ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000200)={0x2, 0x5}) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000040)={0x12}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x200, 0x3c, 0x7fff, 0x8000], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) 15:47:58 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x10}) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:58 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)=0x5) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0x471a) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3e, 0x721021) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000080)={0x7953, 0x81, 0x8, 0x2, 0x1b, 0x401}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) 15:47:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x2, 0x7fffffff, 0x15, 0xf661, 0x3, 0x2}) 15:47:58 executing program 4: ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000080)=0x3) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x8000, 0xdd, 0x9, 0x1], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$RTC_UIE_ON(r1, 0x7003) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000440)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, '\x00', 0x9, 0xa}) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000140)={0x1, 0x8}) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000080)=0x3) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x8000, 0xdd, 0x9, 0x1], 0x4, 0x80800}) (async) ioctl$RTC_UIE_ON(r1, 0x7003) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) (async) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000440)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, '\x00', 0x9, 0xa}) (async) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) (async) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000180)) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000140)={0x1, 0x8}) (async) 15:47:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x2, 0x7fffffff, 0x15, 0xf661, 0x3, 0x2}) 15:47:58 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)=0x5) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0x471a) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3e, 0x721021) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000080)={0x7953, 0x81, 0x8, 0x2, 0x1b, 0x401}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)=0x5) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0x471a) (async) syz_open_dev$dri(&(0x7f0000000180), 0x3e, 0x721021) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000080)={0x7953, 0x81, 0x8, 0x2, 0x1b, 0x401}) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) (async) 15:47:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xfffff81c], 0x1, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000080)={r1, 0x32}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) 15:47:58 executing program 1: ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000200)={0x2, 0x5}) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000040)={0x12}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x200, 0x3c, 0x7fff, 0x8000], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) 15:47:58 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x20000) 15:47:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x2, 0x7fffffff, 0x15, 0xf661, 0x3, 0x2}) 15:47:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xfffff81c], 0x1, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000080)={r1, 0x32}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) 15:47:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xe800) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x8}) 15:47:59 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x10}) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x10}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:47:59 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)=0x5) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0x471a) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3e, 0x721021) (rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000080)={0x7953, 0x81, 0x8, 0x2, 0x1b, 0x401}) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) 15:47:59 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x20000) 15:47:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0x4}) 15:47:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xe800) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x8}) 15:47:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xfffff81c], 0x1, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000080)={r1, 0x32}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xfffff81c], 0x1, 0x180000}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000080)={r1, 0x32}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) (async) 15:47:59 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x20000) 15:47:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:47:59 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000500)={0x80000000, &(0x7f0000000440), &(0x7f0000000480)}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000540)={0x0, 0xffffffff}) 15:47:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xe800) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x8}) 15:47:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async, rerun: 32) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0x4}) (rerun: 32) 15:48:00 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x101, 0x2c}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000000) 15:48:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:00 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000500)={0x80000000, &(0x7f0000000440), &(0x7f0000000480)}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000540)={0x0, 0xffffffff}) 15:48:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0x4}) 15:48:00 executing program 1: ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000040)={0x96, 0x8, 0x6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x4a000) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = socket(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x89ee, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x2, 0x1, 0x5], 0x4}) 15:48:00 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x101, 0x2c}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000000) 15:48:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x220040) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x5, 0x35, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000100)={0x3, 0xae8e, 0x4, 0x5}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:01 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x101, 0x2c}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000000) 15:48:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) 15:48:01 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000500)={0x80000000, &(0x7f0000000440), &(0x7f0000000480)}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000540)={0x0, 0xffffffff}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000500)={0x80000000, &(0x7f0000000440), &(0x7f0000000480)}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000540)={0x0, 0xffffffff}) (async) 15:48:01 executing program 1: ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000040)={0x96, 0x8, 0x6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x4a000) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000040)={0x96, 0x8, 0x6}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x4a000) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) (async) 15:48:01 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x4, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000001c0)={r1, 0x9}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={0x0, r4}}, 0x20) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000140)={0x11, 0x10}, 0x18) 15:48:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x100, 0x0, 0x10000}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000000c0)={0x5, 0x3ff}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000200)=0xfffff91c) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000280)={0xff, 0x5, 0x100, 0x80000001, 0x0, 0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000240)={&(0x7f0000ffc000/0x3000)=nil}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x5, 0x8b, 0x4, 0x7], 0x4, 0x80000}) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) 15:48:01 executing program 0: syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x220040) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x220040) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x5, 0x35, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000100)={0x3, 0xae8e, 0x4, 0x5}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:01 executing program 1: ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000040)={0x96, 0x8, 0x6}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x4a000) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = socket(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x89ee, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async, rerun: 32) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x2, 0x1, 0x5], 0x4}) 15:48:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000000c0)={0x5, 0x3ff}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000200)=0xfffff91c) (async, rerun: 64) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000280)={0xff, 0x5, 0x100, 0x80000001, 0x0, 0x3}) (rerun: 64) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000240)={&(0x7f0000ffc000/0x3000)=nil}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x5, 0x8b, 0x4, 0x7], 0x4, 0x80000}) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) 15:48:02 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x4, 0x0}) (rerun: 64) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000001c0)={r1, 0x9}) (async, rerun: 64) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async, rerun: 64) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={0x0, r4}}, 0x20) (async) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) (async, rerun: 64) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000140)={0x11, 0x10}, 0x18) (rerun: 64) 15:48:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x220040) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x5, 0x35, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000100)={0x3, 0xae8e, 0x4, 0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x100, 0x0, 0x10000}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:02 executing program 1: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:02 executing program 1: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x100, 0x0, 0x10000}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000000c0)={0x5, 0x3ff}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000200)=0xfffff91c) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000280)={0xff, 0x5, 0x100, 0x80000001, 0x0, 0x3}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000240)={&(0x7f0000ffc000/0x3000)=nil}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x5, 0x8b, 0x4, 0x7], 0x4, 0x80000}) (async) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) 15:48:02 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x30240, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x8, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000080)={r2, 0x80}) 15:48:02 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x4, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000001c0)={r1, 0x9}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={0x0, r4}}, 0x20) (async) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) (async, rerun: 32) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000140)={0x11, 0x10}, 0x18) 15:48:02 executing program 1: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = socket(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x89ee, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x2, 0x1, 0x5], 0x4}) 15:48:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xc000) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x1, 0x6ae0, 0x9}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x7e, 0x400) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={r3, 0x8}) 15:48:03 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x30240, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x8, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000080)={r2, 0x80}) 15:48:03 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x100000005, 0x80800) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000040)=0x2) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000100)={0x9, 0xfffffffffffffe00, 0xed5, 0x1ff}) 15:48:03 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x51434f019105344d, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000180)={0x3, 0x3}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000000)={0x1, 0x81}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080)={0x3, r0}) 15:48:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f00000000c0)={0x0, r1}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x5}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000001340)={0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000001c0)=""/4096) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000012c0)={&(0x7f00000011c0)="424606d87659b35ce6b3ddae7f7bd6868e0b2d7df7b941827589177d4c67730ba70a13584adfa8b578bd2aa5241b7c8551f0043898a819282fc56b534acdeda141717886cef3a55f676fe12ce984f65ab807ac3fba9ae52401c7e54204a75a137c699028170017136c20ae415ced2ef90c54503e4dec4f3bd585046f08fb49430ee5bb4b693b62940b2950f9274908fd11a24870aefdf59ffb7afdf2b04ed071d1dfe5052181511b338d855f6c8b4097416207e3c4182e575a71c2c76e5d07e2d00399ef6ca17cdfd8c8d3092832874daaf87144d80333cbdff8349d", 0xdc, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000001300)={r4}) 15:48:03 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x51434f019105344d, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x51434f019105344d, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000180)={0x3, 0x3}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000000)={0x1, 0x81}) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000000)={0x1, 0x81}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080)={0x3, r0}) 15:48:03 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f00000000c0)={0x0, r1}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x5}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000001340)={0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000001c0)=""/4096) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000012c0)={&(0x7f00000011c0)="424606d87659b35ce6b3ddae7f7bd6868e0b2d7df7b941827589177d4c67730ba70a13584adfa8b578bd2aa5241b7c8551f0043898a819282fc56b534acdeda141717886cef3a55f676fe12ce984f65ab807ac3fba9ae52401c7e54204a75a137c699028170017136c20ae415ced2ef90c54503e4dec4f3bd585046f08fb49430ee5bb4b693b62940b2950f9274908fd11a24870aefdf59ffb7afdf2b04ed071d1dfe5052181511b338d855f6c8b4097416207e3c4182e575a71c2c76e5d07e2d00399ef6ca17cdfd8c8d3092832874daaf87144d80333cbdff8349d", 0xdc, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000001300)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000001300)={r4}) 15:48:03 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x30240, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x8, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000080)={r2, 0x80}) 15:48:03 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x100000005, 0x80800) (async) syz_open_dev$dri(&(0x7f0000000080), 0x100000005, 0x80800) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000040)=0x2) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000100)={0x9, 0xfffffffffffffe00, 0xed5, 0x1ff}) 15:48:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xc000) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x1, 0x6ae0, 0x9}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x7e, 0x400) (rerun: 64) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={r3, 0x8}) 15:48:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f00000000c0)={0x0, r1}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x5}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000001340)={0x4}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000001c0)=""/4096) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000012c0)={&(0x7f00000011c0)="424606d87659b35ce6b3ddae7f7bd6868e0b2d7df7b941827589177d4c67730ba70a13584adfa8b578bd2aa5241b7c8551f0043898a819282fc56b534acdeda141717886cef3a55f676fe12ce984f65ab807ac3fba9ae52401c7e54204a75a137c699028170017136c20ae415ced2ef90c54503e4dec4f3bd585046f08fb49430ee5bb4b693b62940b2950f9274908fd11a24870aefdf59ffb7afdf2b04ed071d1dfe5052181511b338d855f6c8b4097416207e3c4182e575a71c2c76e5d07e2d00399ef6ca17cdfd8c8d3092832874daaf87144d80333cbdff8349d", 0xdc, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000001300)={r4}) 15:48:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xc, 0x240402) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:48:04 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x51434f019105344d, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000180)={0x3, 0x3}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000000)={0x1, 0x81}) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080)={0x3, r0}) 15:48:04 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000040)=""/209) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x2, 0x3f, 0x400, 0x6, 0x7, 0x0, 0x8, 0x3, 0xe323, 0x2], 0xa, 0x80000, 0x0, 0xffffffffffffffff}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x418, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x23f, 0x33, @mgmt_frame=@auth={@wo_ht={{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {0x6}, @device_a, @device_a, @random="9466ac9416d6", {0x3, 0x3}}, 0x0, 0x1, 0x36, @val={0x10, 0x1, 0xcd}, [{0xdd, 0xb9, "934c60e8f5899c56470846d5ca2b391df819fbf6e17b415173fe6d2509fad2fe15ae665525c124f3698e6188c9b4d53bd78b13335a1097cfba7d08ff71df4fb9391df436fc2c1933c43e8322668e857528a27adce249cff957611e211968fa00b14bbf710dcd5541db2e4cf122e2692fa99c0776a15d3af8334f2814ca924b80ebab4b5682459f72eec1d25f017c93b4375117f48996d7df2a4784f640fbcb193ebc4a772f00be0e7211cd3da2f3f27fec7a72a7e7a1428cba"}, {0xdd, 0x8b, "e760b26c41609f7dd3f688886eb6bc0d9f979d6974f05b9402bf5ecdad44b976a7d5238ea1912583fceb4f3081ea9cb95f91e4a6c731ac7af578a190a046e5be4066d473cbc64fc6b70c407fb17298f01cd44d39284f957aac28997433e4dbf0f9c3b17eeaf44d678dece8e749052e2d1cc2f711d91fec6bc697683fe62964cd24dabe4e75cb2718117201"}, {0xdd, 0xd0, "84d64a5349525e92c36bd14e4d765265dc2f303c828bd3d8924828798b01adcfef3bb2479860bff11e3254e109a23e391dadeb11075f66a2c3ebc03b0bf4c6bda12f2a1367944c9dbc932ee5442912574a485d39b9996048671f3b30ca129da2dc8c6f4fae5d62ec9bc0e35f40a33733eba2001b58b66788337aad334ed219b3209947a0175c6d5ab882a2ce89a8b840f0e810845afba99adade4c88c55c6f7a9995e89bbb8e1a327a3924f2bbd131bdf141478f27ea8137ca2e2daac594b39ca37587f14c01d916d3570188043efe38"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x1a8, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @device_b, @device_a, @random="3f84abb3c6ef", {0x3, 0x4}}, {0x6}}, {@type00={{0x0, 0x2, 0xb}, {0x219e}, @device_a, @broadcast, @initial, {0xb, 0x5}}, {0x9, 0x1, 0x1}}}, @a_msdu=[{@device_b, @device_a, 0x22, "5da88e38a11cd283240e856a4a02526effd5d8e82b812141c8ea2b92200207b8b03a"}, {@broadcast, @broadcast, 0x8b, "a0f264a438914dc18e63742467f0a4f371da91b4b5f94b65aaaa3ae3002ee3fffa94353a0e1364f3deb2d06f3780b9844e8ad6395d8e617894a64e8a1072f5bb46e0413c09036368b39c6fbf5ac8e46eda9c368f98dfd70a1a864f8ef1ef73c3e06b7c7d7512a81f1ee42fab01a79b978191a6591f7f8d3fa39b9a3f640c1c3eb9ecac27250d2c333927e1"}, {@device_a, @device_a, 0x78, "5a8a34690ce84470f2365c60ac5114042f4810ba2d961fcdfb910ddb5cb7bb9c956de7c1210fc1aa1292e791fd285724f6a5076559cc2b3375ada6070cbe6b6e44c5a9ed5a6f82bace234dc3f40cd7f063f7753e8dca0f52c854b28998dadf55ef310f1f8cc9b1a5165abf10e3dcf23ec371f2fe92266da0"}, {@broadcast, @device_b, 0xc, "6b53cfb4d3fd2b1d3e99dab4"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6558}]}, 0x418}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) 15:48:04 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x100000005, 0x80800) (async) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000040)=0x2) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000100)={0x9, 0xfffffffffffffe00, 0xed5, 0x1ff}) 15:48:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xc000) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x1, 0x6ae0, 0x9}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x7e, 0x400) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={r3, 0x8}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xc000) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x1, 0x6ae0, 0x9}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x7e, 0x400) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x10001}) (async) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={r3, 0x8}) (async) 15:48:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f00000000c0)=0x1) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x4000008001, 0x400) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) 15:48:04 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000040)=""/209) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x2, 0x3f, 0x400, 0x6, 0x7, 0x0, 0x8, 0x3, 0xe323, 0x2], 0xa, 0x80000, 0x0, 0xffffffffffffffff}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x418, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x23f, 0x33, @mgmt_frame=@auth={@wo_ht={{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {0x6}, @device_a, @device_a, @random="9466ac9416d6", {0x3, 0x3}}, 0x0, 0x1, 0x36, @val={0x10, 0x1, 0xcd}, [{0xdd, 0xb9, "934c60e8f5899c56470846d5ca2b391df819fbf6e17b415173fe6d2509fad2fe15ae665525c124f3698e6188c9b4d53bd78b13335a1097cfba7d08ff71df4fb9391df436fc2c1933c43e8322668e857528a27adce249cff957611e211968fa00b14bbf710dcd5541db2e4cf122e2692fa99c0776a15d3af8334f2814ca924b80ebab4b5682459f72eec1d25f017c93b4375117f48996d7df2a4784f640fbcb193ebc4a772f00be0e7211cd3da2f3f27fec7a72a7e7a1428cba"}, {0xdd, 0x8b, "e760b26c41609f7dd3f688886eb6bc0d9f979d6974f05b9402bf5ecdad44b976a7d5238ea1912583fceb4f3081ea9cb95f91e4a6c731ac7af578a190a046e5be4066d473cbc64fc6b70c407fb17298f01cd44d39284f957aac28997433e4dbf0f9c3b17eeaf44d678dece8e749052e2d1cc2f711d91fec6bc697683fe62964cd24dabe4e75cb2718117201"}, {0xdd, 0xd0, "84d64a5349525e92c36bd14e4d765265dc2f303c828bd3d8924828798b01adcfef3bb2479860bff11e3254e109a23e391dadeb11075f66a2c3ebc03b0bf4c6bda12f2a1367944c9dbc932ee5442912574a485d39b9996048671f3b30ca129da2dc8c6f4fae5d62ec9bc0e35f40a33733eba2001b58b66788337aad334ed219b3209947a0175c6d5ab882a2ce89a8b840f0e810845afba99adade4c88c55c6f7a9995e89bbb8e1a327a3924f2bbd131bdf141478f27ea8137ca2e2daac594b39ca37587f14c01d916d3570188043efe38"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x1a8, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @device_b, @device_a, @random="3f84abb3c6ef", {0x3, 0x4}}, {0x6}}, {@type00={{0x0, 0x2, 0xb}, {0x219e}, @device_a, @broadcast, @initial, {0xb, 0x5}}, {0x9, 0x1, 0x1}}}, @a_msdu=[{@device_b, @device_a, 0x22, "5da88e38a11cd283240e856a4a02526effd5d8e82b812141c8ea2b92200207b8b03a"}, {@broadcast, @broadcast, 0x8b, "a0f264a438914dc18e63742467f0a4f371da91b4b5f94b65aaaa3ae3002ee3fffa94353a0e1364f3deb2d06f3780b9844e8ad6395d8e617894a64e8a1072f5bb46e0413c09036368b39c6fbf5ac8e46eda9c368f98dfd70a1a864f8ef1ef73c3e06b7c7d7512a81f1ee42fab01a79b978191a6591f7f8d3fa39b9a3f640c1c3eb9ecac27250d2c333927e1"}, {@device_a, @device_a, 0x78, "5a8a34690ce84470f2365c60ac5114042f4810ba2d961fcdfb910ddb5cb7bb9c956de7c1210fc1aa1292e791fd285724f6a5076559cc2b3375ada6070cbe6b6e44c5a9ed5a6f82bace234dc3f40cd7f063f7753e8dca0f52c854b28998dadf55ef310f1f8cc9b1a5165abf10e3dcf23ec371f2fe92266da0"}, {@broadcast, @device_b, 0xc, "6b53cfb4d3fd2b1d3e99dab4"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6558}]}, 0x418}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) 15:48:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2800) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x3d, 0xfffffc00], 0x2}) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f00000001c0)=0x7fffffff) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000080)={0x1, 0x4}) 15:48:04 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0xc, 0x240402) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0xc, 0x240402) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:48:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x6, 0x0, {0x0}, {}, 0x9}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0xb610, 0xfffffffd, {r1}, {0xffffffffffffffff}, 0x9, 0x10001}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)) 15:48:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f00000000c0)=0x1) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x4000008001, 0x400) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) 15:48:04 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000080)=[{}], 0x7, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {0x0, 0x80000000, 0x0, {0x0}}, {0x0, 0x80000000, 0x0, {0x0}}], 0x3, 0x0, &(0x7f0000000500)=[{}, {}, {}]}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000c80)) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000c00)={0x0, 0x1, 0x0, &(0x7f0000000600)=[{0x80000000}], 0xa, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000b00)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {0x0, 0x80000000}, {}], 0x1, 0x0, &(0x7f0000000bc0)=[{}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000e00)={r5, &(0x7f0000000d40), &(0x7f0000000d80)=[{}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000e40)={{r6, r3, 0x4, [0xe000000, 0x8]}, {r8, r9, 0x2, [0x5, 0x2]}, 0xdde3d01681446745, [0x3, 0x94]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000f80)={r5, &(0x7f0000000ec0), &(0x7f0000000f00)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000fc0)={r10}) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000000)={0x3}) r11 = syz_open_dev$media(&(0x7f0000000cc0), 0xffffffff, 0x30000) ioctl$MEDIA_IOC_SETUP_LINK(r11, 0xc0347c03, &(0x7f0000000d00)={{r2, r1, 0x1, [0x1, 0xffffffb4]}, {r5, r7, 0x0, [0x6, 0x2]}, 0x0, [0xe25, 0x7]}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000e80)) 15:48:04 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000040)=""/209) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x2, 0x3f, 0x400, 0x6, 0x7, 0x0, 0x8, 0x3, 0xe323, 0x2], 0xa, 0x80000, 0x0, 0xffffffffffffffff}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) (async) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x418, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x23f, 0x33, @mgmt_frame=@auth={@wo_ht={{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {0x6}, @device_a, @device_a, @random="9466ac9416d6", {0x3, 0x3}}, 0x0, 0x1, 0x36, @val={0x10, 0x1, 0xcd}, [{0xdd, 0xb9, "934c60e8f5899c56470846d5ca2b391df819fbf6e17b415173fe6d2509fad2fe15ae665525c124f3698e6188c9b4d53bd78b13335a1097cfba7d08ff71df4fb9391df436fc2c1933c43e8322668e857528a27adce249cff957611e211968fa00b14bbf710dcd5541db2e4cf122e2692fa99c0776a15d3af8334f2814ca924b80ebab4b5682459f72eec1d25f017c93b4375117f48996d7df2a4784f640fbcb193ebc4a772f00be0e7211cd3da2f3f27fec7a72a7e7a1428cba"}, {0xdd, 0x8b, "e760b26c41609f7dd3f688886eb6bc0d9f979d6974f05b9402bf5ecdad44b976a7d5238ea1912583fceb4f3081ea9cb95f91e4a6c731ac7af578a190a046e5be4066d473cbc64fc6b70c407fb17298f01cd44d39284f957aac28997433e4dbf0f9c3b17eeaf44d678dece8e749052e2d1cc2f711d91fec6bc697683fe62964cd24dabe4e75cb2718117201"}, {0xdd, 0xd0, "84d64a5349525e92c36bd14e4d765265dc2f303c828bd3d8924828798b01adcfef3bb2479860bff11e3254e109a23e391dadeb11075f66a2c3ebc03b0bf4c6bda12f2a1367944c9dbc932ee5442912574a485d39b9996048671f3b30ca129da2dc8c6f4fae5d62ec9bc0e35f40a33733eba2001b58b66788337aad334ed219b3209947a0175c6d5ab882a2ce89a8b840f0e810845afba99adade4c88c55c6f7a9995e89bbb8e1a327a3924f2bbd131bdf141478f27ea8137ca2e2daac594b39ca37587f14c01d916d3570188043efe38"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x1a8, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @device_b, @device_a, @random="3f84abb3c6ef", {0x3, 0x4}}, {0x6}}, {@type00={{0x0, 0x2, 0xb}, {0x219e}, @device_a, @broadcast, @initial, {0xb, 0x5}}, {0x9, 0x1, 0x1}}}, @a_msdu=[{@device_b, @device_a, 0x22, "5da88e38a11cd283240e856a4a02526effd5d8e82b812141c8ea2b92200207b8b03a"}, {@broadcast, @broadcast, 0x8b, "a0f264a438914dc18e63742467f0a4f371da91b4b5f94b65aaaa3ae3002ee3fffa94353a0e1364f3deb2d06f3780b9844e8ad6395d8e617894a64e8a1072f5bb46e0413c09036368b39c6fbf5ac8e46eda9c368f98dfd70a1a864f8ef1ef73c3e06b7c7d7512a81f1ee42fab01a79b978191a6591f7f8d3fa39b9a3f640c1c3eb9ecac27250d2c333927e1"}, {@device_a, @device_a, 0x78, "5a8a34690ce84470f2365c60ac5114042f4810ba2d961fcdfb910ddb5cb7bb9c956de7c1210fc1aa1292e791fd285724f6a5076559cc2b3375ada6070cbe6b6e44c5a9ed5a6f82bace234dc3f40cd7f063f7753e8dca0f52c854b28998dadf55ef310f1f8cc9b1a5165abf10e3dcf23ec371f2fe92266da0"}, {@broadcast, @device_b, 0xc, "6b53cfb4d3fd2b1d3e99dab4"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6558}]}, 0x418}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) 15:48:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2800) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x3d, 0xfffffc00], 0x2}) (async, rerun: 32) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) (rerun: 32) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f00000001c0)=0x7fffffff) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) (async) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000080)={0x1, 0x4}) 15:48:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xc, 0x240402) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) syz_open_dev$dri(&(0x7f0000000180), 0xc, 0x240402) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) 15:48:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x6, 0x0, {}, {}, 0x9}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x6, 0x0, {0x0}, {}, 0x9}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0xb610, 0xfffffffd, {r1}, {0xffffffffffffffff}, 0x9, 0x10001}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)) 15:48:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f00000000c0)=0x1) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x4000008001, 0x400) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) 15:48:04 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000080)=[{}], 0x7, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {0x0, 0x80000000, 0x0, {0x0}}, {0x0, 0x80000000, 0x0, {0x0}}], 0x3, 0x0, &(0x7f0000000500)=[{}, {}, {}]}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async, rerun: 32) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000c80)) (rerun: 32) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000c00)={0x0, 0x1, 0x0, &(0x7f0000000600)=[{0x80000000}], 0xa, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000b00)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {0x0, 0x80000000}, {}], 0x1, 0x0, &(0x7f0000000bc0)=[{}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000e00)={r5, &(0x7f0000000d40), &(0x7f0000000d80)=[{}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000e40)={{r6, r3, 0x4, [0xe000000, 0x8]}, {r8, r9, 0x2, [0x5, 0x2]}, 0xdde3d01681446745, [0x3, 0x94]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000f80)={r5, &(0x7f0000000ec0), &(0x7f0000000f00)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000fc0)={r10}) (async) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r11 = syz_open_dev$media(&(0x7f0000000cc0), 0xffffffff, 0x30000) ioctl$MEDIA_IOC_SETUP_LINK(r11, 0xc0347c03, &(0x7f0000000d00)={{r2, r1, 0x1, [0x1, 0xffffffb4]}, {r5, r7, 0x0, [0x6, 0x2]}, 0x0, [0xe25, 0x7]}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000e80)) 15:48:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x20000000, 0x109080) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000180)=""/71) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x40, 0x430000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x2, 0x5, 0x400}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000040)={0x9, 0xfff, 0x4}) 15:48:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000040)=""/35) 15:48:04 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 15:48:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2800) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x3d, 0xfffffc00], 0x2}) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f00000001c0)=0x7fffffff) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000080)={0x1, 0x4}) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2800) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x3d, 0xfffffc00], 0x2}) (async) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f00000001c0)=0x7fffffff) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) (async) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000080)={0x1, 0x4}) (async) 15:48:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x6, 0x0, {0x0}, {}, 0x9}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0xb610, 0xfffffffd, {r1}, {0xffffffffffffffff}, 0x9, 0x10001}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)) 15:48:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x20000000, 0x109080) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000180)=""/71) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x40, 0x430000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x2, 0x5, 0x400}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000040)={0x9, 0xfff, 0x4}) 15:48:05 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000080)=[{}], 0x7, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {0x0, 0x80000000, 0x0, {0x0}}, {0x0, 0x80000000, 0x0, {0x0}}], 0x3, 0x0, &(0x7f0000000500)=[{}, {}, {}]}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000c80)) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000c00)={0x0, 0x1, 0x0, &(0x7f0000000600)=[{0x80000000}], 0xa, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000b00)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {0x0, 0x80000000}, {}], 0x1, 0x0, &(0x7f0000000bc0)=[{}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000e00)={r5, &(0x7f0000000d40), &(0x7f0000000d80)=[{}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000e40)={{r6, r3, 0x4, [0xe000000, 0x8]}, {r8, r9, 0x2, [0x5, 0x2]}, 0xdde3d01681446745, [0x3, 0x94]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000f80)={r5, &(0x7f0000000ec0), &(0x7f0000000f00)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000fc0)={r10}) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000000)={0x3}) r11 = syz_open_dev$media(&(0x7f0000000cc0), 0xffffffff, 0x30000) ioctl$MEDIA_IOC_SETUP_LINK(r11, 0xc0347c03, &(0x7f0000000d00)={{r2, r1, 0x1, [0x1, 0xffffffb4]}, {r5, r7, 0x0, [0x6, 0x2]}, 0x0, [0xe25, 0x7]}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000e80)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000080)=[{}], 0x7, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000500)=[{}, {}, {}]}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000c80)) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000c00)={0x0, 0x1, 0x0, &(0x7f0000000600)=[{}], 0xa, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000bc0)=[{}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000e00)={r5, &(0x7f0000000d40), &(0x7f0000000d80)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000e40)={{r6, r3, 0x4, [0xe000000, 0x8]}, {r8, r9, 0x2, [0x5, 0x2]}, 0xdde3d01681446745, [0x3, 0x94]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000f80)={r5, &(0x7f0000000ec0), &(0x7f0000000f00)}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000fc0)={r10}) (async) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000000)={0x3}) (async) syz_open_dev$media(&(0x7f0000000cc0), 0xffffffff, 0x30000) (async) ioctl$MEDIA_IOC_SETUP_LINK(r11, 0xc0347c03, &(0x7f0000000d00)={{r2, r1, 0x1, [0x1, 0xffffffb4]}, {r5, r7, 0x0, [0x6, 0x2]}, 0x0, [0xe25, 0x7]}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000e80)) (async) 15:48:05 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 15:48:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000040)=""/35) 15:48:05 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x2, 0x4, 0xbfb1, 0x6, 0x3, 0x66b, 0x400, 0xac8e], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x1}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000140)) 15:48:05 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) 15:48:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x20000000, 0x109080) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000180)=""/71) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x40, 0x430000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x2, 0x5, 0x400}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000040)={0x9, 0xfff, 0x4}) 15:48:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x13b202) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:05 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) 15:48:05 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x2, 0x4, 0xbfb1, 0x6, 0x3, 0x66b, 0x400, 0xac8e], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x1}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) (async) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000140)) 15:48:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000040)=""/35) 15:48:05 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) 15:48:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x800000000000004, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x1}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000001680)={0x3, 0x80, 0x5, 0x6, 0x0, 0xcf, 0x0, 0x5, 0x8000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000140), 0x3}, 0x40, 0x6, 0x0, 0x3, 0xea, 0x4, 0x4, 0x0, 0x0, 0x0, 0x3}, r1, 0xe, r1, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7fff) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f0000001640)={0x7, &(0x7f00000001c0)=""/4096, &(0x7f0000001580)=[{0x400, 0x43, 0x3, &(0x7f00000000c0)=""/67}, {0xfffffffe, 0x5c, 0x2, &(0x7f00000011c0)=""/92}, {0x5, 0xf3, 0x0, &(0x7f0000001240)=""/243}, {0x3, 0x0, 0x2, &(0x7f0000000140)}, {0x3, 0x52, 0x5, &(0x7f0000001340)=""/82}, {0xffff, 0x83, 0x9, &(0x7f00000013c0)=""/131}, {0xfffffffb, 0xce, 0x8, &(0x7f0000001480)=""/206}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2aa7, 0x0, 0x637e}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) connect$pppoe(r5, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000002900)={0x1, 0x1, &(0x7f0000001840)=""/123, &(0x7f00000018c0)=""/27, &(0x7f0000001900)=""/4096, 0x2000}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) ioctl$VHOST_VDPA_SET_GROUP_ASID(r5, 0x4008af7c, &(0x7f0000002940)={0x0, 0xce4}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r6, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000001700)={0x8, 0x120, 0xfa00, {0x3, {0x8eb7, 0x20000, "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", 0x81, 0x9, 0x9, 0x1, 0x1, 0x5d, 0x1f}, r6}}, 0x128) 15:48:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x13b202) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x13b202) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) 15:48:05 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x2, 0x4, 0xbfb1, 0x6, 0x3, 0x66b, 0x400, 0xac8e], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x1}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000140)) 15:48:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000080)='U', 0xb8cb35c}) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80000000, 0x5, 0xffffedf3}) 15:48:05 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) 15:48:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x800000000000004, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x1}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000001680)={0x3, 0x80, 0x5, 0x6, 0x0, 0xcf, 0x0, 0x5, 0x8000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000140), 0x3}, 0x40, 0x6, 0x0, 0x3, 0xea, 0x4, 0x4, 0x0, 0x0, 0x0, 0x3}, r1, 0xe, r1, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7fff) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f0000001640)={0x7, &(0x7f00000001c0)=""/4096, &(0x7f0000001580)=[{0x400, 0x43, 0x3, &(0x7f00000000c0)=""/67}, {0xfffffffe, 0x5c, 0x2, &(0x7f00000011c0)=""/92}, {0x5, 0xf3, 0x0, &(0x7f0000001240)=""/243}, {0x3, 0x0, 0x2, &(0x7f0000000140)}, {0x3, 0x52, 0x5, &(0x7f0000001340)=""/82}, {0xffff, 0x83, 0x9, &(0x7f00000013c0)=""/131}, {0xfffffffb, 0xce, 0x8, &(0x7f0000001480)=""/206}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2aa7, 0x0, 0x637e}) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) (async) connect$pppoe(r5, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000002900)={0x1, 0x1, &(0x7f0000001840)=""/123, &(0x7f00000018c0)=""/27, &(0x7f0000001900)=""/4096, 0x2000}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) (async) ioctl$VHOST_VDPA_SET_GROUP_ASID(r5, 0x4008af7c, &(0x7f0000002940)={0x0, 0xce4}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r6, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000001700)={0x8, 0x120, 0xfa00, {0x3, {0x8eb7, 0x20000, "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", 0x81, 0x9, 0x9, 0x1, 0x1, 0x5d, 0x1f}, r6}}, 0x128) 15:48:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x200200) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000040)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x3, 0x8001, 0xfffffffe, 0x6, 0x2, 0x80, 0x3], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000140)={0x0, 0x1}) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000000)={0x2, 0x1, 0xb5d, 0x8, 0x7f, 0x3b, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000001c0)) 15:48:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x13b202) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000040)) 15:48:05 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:48:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x5, 0x8, 0x10000, 0x403c, 0x1, [0x2, 0x3, 0x0, 0x800], [0x401, 0x64c, 0x9, 0x4], [0xfff, 0x4, 0xfffffff8, 0x7fff], [0x10001, 0xffffffffffffffff, 0x8, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000200)) openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x4202, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f00000000c0)=0xfffffffffffffff9) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x8}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x200200) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000040)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x3, 0x8001, 0xfffffffe, 0x6, 0x2, 0x80, 0x3], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000000)={0x2, 0x1, 0xb5d, 0x8, 0x7f, 0x3b, 0x4}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000001c0)) 15:48:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x800000000000004, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x1}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000001680)={0x3, 0x80, 0x5, 0x6, 0x0, 0xcf, 0x0, 0x5, 0x8000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000140), 0x3}, 0x40, 0x6, 0x0, 0x3, 0xea, 0x4, 0x4, 0x0, 0x0, 0x0, 0x3}, r1, 0xe, r1, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7fff) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f0000001640)={0x7, &(0x7f00000001c0)=""/4096, &(0x7f0000001580)=[{0x400, 0x43, 0x3, &(0x7f00000000c0)=""/67}, {0xfffffffe, 0x5c, 0x2, &(0x7f00000011c0)=""/92}, {0x5, 0xf3, 0x0, &(0x7f0000001240)=""/243}, {0x3, 0x0, 0x2, &(0x7f0000000140)}, {0x3, 0x52, 0x5, &(0x7f0000001340)=""/82}, {0xffff, 0x83, 0x9, &(0x7f00000013c0)=""/131}, {0xfffffffb, 0xce, 0x8, &(0x7f0000001480)=""/206}]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2aa7, 0x0, 0x637e}) (async, rerun: 32) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) (async) connect$pppoe(r5, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000002900)={0x1, 0x1, &(0x7f0000001840)=""/123, &(0x7f00000018c0)=""/27, &(0x7f0000001900)=""/4096, 0x2000}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) ioctl$VHOST_VDPA_SET_GROUP_ASID(r5, 0x4008af7c, &(0x7f0000002940)={0x0, 0xce4}) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r6, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000001700)={0x8, 0x120, 0xfa00, {0x3, {0x8eb7, 0x20000, "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", 0x81, 0x9, 0x9, 0x1, 0x1, 0x5d, 0x1f}, r6}}, 0x128) 15:48:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000040)) 15:48:05 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:48:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000080)='U', 0xb8cb35c}) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80000000, 0x5, 0xffffedf3}) 15:48:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x5, 0x8, 0x10000, 0x403c, 0x1, [0x2, 0x3, 0x0, 0x800], [0x401, 0x64c, 0x9, 0x4], [0xfff, 0x4, 0xfffffff8, 0x7fff], [0x10001, 0xffffffffffffffff, 0x8, 0x4]}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000200)) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x4202, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f00000000c0)=0xfffffffffffffff9) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x8}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000040)) 15:48:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x200200) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000040)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x3, 0x8001, 0xfffffffe, 0x6, 0x2, 0x80, 0x3], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000140)={0x0, 0x1}) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000000)={0x2, 0x1, 0xb5d, 0x8, 0x7f, 0x3b, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000001c0)) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x200200) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000040)={0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x3, 0x8001, 0xfffffffe, 0x6, 0x2, 0x80, 0x3], 0x7}) (async) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000000)={0x2, 0x1, 0xb5d, 0x8, 0x7f, 0x3b, 0x4}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000001c0)) (async) 15:48:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x80000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:06 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:48:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x5, 0x8, 0x10000, 0x403c, 0x1, [0x2, 0x3, 0x0, 0x800], [0x401, 0x64c, 0x9, 0x4], [0xfff, 0x4, 0xfffffff8, 0x7fff], [0x10001, 0xffffffffffffffff, 0x8, 0x4]}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000200)) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x4202, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f00000000c0)=0xfffffffffffffff9) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x8}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x1}) 15:48:06 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x1c) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000140)) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x20, 0x2, 0x8, 0x1, 0x0, 0x200, 0x101, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0xffffffffffffffff, 0x101}, 0x210, 0x1f, 0x6, 0x4, 0xd6f, 0x403, 0x7b, 0x0, 0x1ff, 0x0, 0x9511}, 0x0, 0x7, 0xffffffffffffffff, 0x8d56fc1f5734eaaf) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f00000000c0)={0x10}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)) 15:48:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x80000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:06 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x4, 0x0, 0x9399}) syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x40000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x4}) 15:48:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000080)='U', 0xb8cb35c}) (async, rerun: 32) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80000000, 0x5, 0xffffedf3}) 15:48:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x1}) 15:48:06 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x1c) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000140)) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x20, 0x2, 0x8, 0x1, 0x0, 0x200, 0x101, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0xffffffffffffffff, 0x101}, 0x210, 0x1f, 0x6, 0x4, 0xd6f, 0x403, 0x7b, 0x0, 0x1ff, 0x0, 0x9511}, 0x0, 0x7, 0xffffffffffffffff, 0x8d56fc1f5734eaaf) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x1c) (async) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000140)) (async) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x20, 0x2, 0x8, 0x1, 0x0, 0x200, 0x101, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0xffffffffffffffff, 0x101}, 0x210, 0x1f, 0x6, 0x4, 0xd6f, 0x403, 0x7b, 0x0, 0x1ff, 0x0, 0x9511}, 0x0, 0x7, 0xffffffffffffffff, 0x8d56fc1f5734eaaf) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) 15:48:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f00000000c0)={0x10}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)) (rerun: 64) 15:48:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x80000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:06 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x4, 0x0, 0x9399}) syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x40000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x4}) 15:48:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x1}) 15:48:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x189, 0x2, 0xeb9d, 0xffffffff], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f00000000c0)={0xfff, 0x4, 0x9}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, &(0x7f00000002c0)={0x0, 0xa0, ""/160}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x7, 0x0, 0x1}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={r4, 0x4f}) 15:48:07 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x4, 0x0, 0x9399}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x40000) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x4}) 15:48:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f00000000c0)={0x10}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)) 15:48:07 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x1c) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000140)) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x20, 0x2, 0x8, 0x1, 0x0, 0x200, 0x101, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0xffffffffffffffff, 0x101}, 0x210, 0x1f, 0x6, 0x4, 0xd6f, 0x403, 0x7b, 0x0, 0x1ff, 0x0, 0x9511}, 0x0, 0x7, 0xffffffffffffffff, 0x8d56fc1f5734eaaf) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x1c) (async) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000140)) (async) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x20, 0x2, 0x8, 0x1, 0x0, 0x200, 0x101, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0xffffffffffffffff, 0x101}, 0x210, 0x1f, 0x6, 0x4, 0xd6f, 0x403, 0x7b, 0x0, 0x1ff, 0x0, 0x9511}, 0x0, 0x7, 0xffffffffffffffff, 0x8d56fc1f5734eaaf) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) 15:48:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:08 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffef7, 0x692a40) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x49, 0x600) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0xde], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) 15:48:08 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) connect$pppoe(r3, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r4, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140), r4, 0x0, 0x2, 0x4}}, 0x20) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x7f, 0x5f96d135, 0xb734, 0x1, 0x7, 0x5}) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x189, 0x2, 0xeb9d, 0xffffffff], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f00000000c0)={0xfff, 0x4, 0x9}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, &(0x7f00000002c0)={0x0, 0xa0, ""/160}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x7, 0x0, 0x1}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={r4, 0x4f}) 15:48:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x9216], 0x1, 0x80800}) 15:48:08 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x1) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:08 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) connect$pppoe(r3, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740), 0x111, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r4, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140), r4, 0x0, 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140), r4, 0x0, 0x2, 0x4}}, 0x20) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x7f, 0x5f96d135, 0xb734, 0x1, 0x7, 0x5}) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x189, 0x2, 0xeb9d, 0xffffffff], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f00000000c0)={0xfff, 0x4, 0x9}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, &(0x7f00000002c0)={0x0, 0xa0, ""/160}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x7, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000200)={r5}) (async) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={r4, 0x4f}) 15:48:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x9216], 0x1, 0x80800}) 15:48:08 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffef7, 0x692a40) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x49, 0x600) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0xde], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) 15:48:08 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async, rerun: 64) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x1) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) (async, rerun: 32) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (rerun: 32) 15:48:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x11}) 15:48:08 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) connect$pppoe(r3, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r4, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140), r4, 0x0, 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140), r4, 0x0, 0x2, 0x4}}, 0x20) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x7f, 0x5f96d135, 0xb734, 0x1, 0x7, 0x5}) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x869, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:08 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x1) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:08 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffef7, 0x692a40) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x49, 0x600) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000180)={0x0, 0x1}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0xde], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) 15:48:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x9216], 0x1, 0x80800}) 15:48:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x11}) 15:48:08 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x869, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x869, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7fff, 0x80602) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[{}, {}, {}, {}], 0x6, 0x0, '\x00', 0x1, 0x4}) 15:48:08 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x428042, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r1, 0x8004af79, &(0x7f0000000000)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) 15:48:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x11}) 15:48:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x103001) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040)={0x0, 0x2}) 15:48:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x869, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7fff, 0x80602) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000200)) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000300)=""/160) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r5, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f00000003c0)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r6, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x4}) 15:48:08 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x428042, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r1, 0x8004af79, &(0x7f0000000000)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x428042, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r1, 0x8004af79, &(0x7f0000000000)) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) (async) 15:48:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x103001) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040)={0x0, 0x2}) (async) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040)={0x0, 0x2}) 15:48:08 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x7fff, 0x80602) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7fff, 0x80602) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f00000001c0)={0x0, 0x1, 0x6b, 0xa, &(0x7f0000000080)=""/10, 0xf, &(0x7f00000000c0)=""/15, 0x62, &(0x7f0000000100)=""/98}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x1, 0x48400) ioctl$RTC_UIE_ON(r2, 0x7003) 15:48:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) (async, rerun: 64) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async, rerun: 64) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (rerun: 64) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000200)) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) (async) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000300)=""/160) (async, rerun: 64) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (rerun: 64) ioctl$VHOST_VDPA_GET_CONFIG(r5, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f00000003c0)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r6, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) (async, rerun: 32) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10) (async, rerun: 32) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x4}) (rerun: 32) 15:48:09 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x428042, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r1, 0x8004af79, &(0x7f0000000000)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) (async) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) 15:48:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[{}, {}, {}, {}], 0x6, 0x0, '\x00', 0x1, 0x4}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[{}, {}, {}, {}], 0x6, 0x0, '\x00', 0x1, 0x4}) 15:48:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffff7d, 0x1ca40) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000080)={0x9, 0x9, 0x1, 0x4}) 15:48:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f00000001c0)={0x0, 0x1, 0x6b, 0xa, &(0x7f0000000080)=""/10, 0xf, &(0x7f00000000c0)=""/15, 0x62, &(0x7f0000000100)=""/98}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x1, 0x48400) ioctl$RTC_UIE_ON(r2, 0x7003) 15:48:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x103001) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) (async) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040)={0x0, 0x2}) 15:48:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000200)) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000200)) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000300)=""/160) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r5, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f00000003c0)) (async) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f00000003c0)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r6, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x4}) 15:48:09 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffff7d, 0x1ca40) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000080)={0x9, 0x9, 0x1, 0x4}) 15:48:09 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x34202, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000000)=[0x400, 0xb, 0x2, 0xfffffff9], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000080)) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0xb97, 0x0, 0x9, 0x3f}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x6, 0x80, 0x0, 0x2], 0x4, 0x800, 0x0, 0xffffffffffffffff}) openat$userio(0xffffffffffffff9c, &(0x7f0000001300), 0x2000, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000001c0)) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000001340)=ANY=[@ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c1ea186b34d4313563b3bde894790193afc8416e948dd0107386a78874a68a5f069e79412855c3de4c5ad2fdbadbc8c58414c3e5bc"]) 15:48:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f00000001c0)={0x0, 0x1, 0x6b, 0xa, &(0x7f0000000080)=""/10, 0xf, &(0x7f00000000c0)=""/15, 0x62, &(0x7f0000000100)=""/98}) (async) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f00000001c0)={0x0, 0x1, 0x6b, 0xa, &(0x7f0000000080)=""/10, 0xf, &(0x7f00000000c0)=""/15, 0x62, &(0x7f0000000100)=""/98}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x1, 0x48400) ioctl$RTC_UIE_ON(r2, 0x7003) 15:48:10 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x90103, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x1d, 0x406, 0x14, 0x19, 0x10000005, 0xdd7e, 0x0, 0x65, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x10000000000, 0x4a08c0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:10 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x100000000000004, 0x80200) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffff7d, 0x1ca40) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000080)={0x9, 0x9, 0x1, 0x4}) 15:48:10 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x34202, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000000)=[0x400, 0xb, 0x2, 0xfffffff9], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000080)) (async) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0xb97, 0x0, 0x9, 0x3f}) (async, rerun: 32) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x6, 0x80, 0x0, 0x2], 0x4, 0x800, 0x0, 0xffffffffffffffff}) openat$userio(0xffffffffffffff9c, &(0x7f0000001300), 0x2000, 0x0) (async) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000001c0)) (async) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000001340)=ANY=[@ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c1ea186b34d4313563b3bde894790193afc8416e948dd0107386a78874a68a5f069e79412855c3de4c5ad2fdbadbc8c58414c3e5bc"]) 15:48:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[{}, {}, {}, {}], 0x6, 0x0, '\x00', 0x1, 0x4}) 15:48:10 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x90103, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x1d, 0x406, 0x14, 0x19, 0x10000005, 0xdd7e, 0x0, 0x65, 0xffffffffffffffff}) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x10000000000, 0x4a08c0) (async) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7f}, 0x2) 15:48:10 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x100000000000004, 0x80200) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:10 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x0, 0x1, {0x2, 0x18, 0x13, 0x8, 0x5, 0xfffffffd, 0x1, 0x145}}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000000c0)={0x38, 0x2e, 0x1, 0x17, 0xb, 0xffff, 0x3, 0x8b, 0x1}) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x244100, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x11}) 15:48:10 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x34202, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000000)=[0x400, 0xb, 0x2, 0xfffffff9], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000080)) (async) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000080)) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0xb97, 0x0, 0x9, 0x3f}) (async) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0xb97, 0x0, 0x9, 0x3f}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x6, 0x80, 0x0, 0x2], 0x4, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x6, 0x80, 0x0, 0x2], 0x4, 0x800, 0x0, 0xffffffffffffffff}) openat$userio(0xffffffffffffff9c, &(0x7f0000001300), 0x2000, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000001c0)) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000001340)=ANY=[@ANYBLOB="000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c1ea186b34d4313563b3bde894790193afc8416e948dd0107386a78874a68a5f069e79412855c3de4c5ad2fdbadbc8c58414c3e5bc"]) 15:48:11 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x100000000000004, 0x80200) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:11 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x171], 0x1, 0x80000}) 15:48:11 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x0, 0x1, {0x2, 0x18, 0x13, 0x8, 0x5, 0xfffffffd, 0x1, 0x145}}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000000c0)={0x38, 0x2e, 0x1, 0x17, 0xb, 0xffff, 0x3, 0x8b, 0x1}) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x244100, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x11}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x0, 0x1, {0x2, 0x18, 0x13, 0x8, 0x5, 0xfffffffd, 0x1, 0x145}}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000000c0)={0x38, 0x2e, 0x1, 0x17, 0xb, 0xffff, 0x3, 0x8b, 0x1}) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x244100, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x11}) (async) 15:48:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7f}, 0x2) 15:48:11 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x90103, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x1d, 0x406, 0x14, 0x19, 0x10000005, 0xdd7e, 0x0, 0x65, 0xffffffffffffffff}) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x10000000000, 0x4a08c0) ioctl$RTC_AIE_ON(r0, 0x7001) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x401, 0x20600) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x1, 0x4, 0x9, 0x9, 0x0, 0xfffffffe, 0x5f1}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000100)) 15:48:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x9}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x10}) 15:48:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7f}, 0x2) 15:48:12 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x171], 0x1, 0x80000}) 15:48:12 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x0, 0x1, {0x2, 0x18, 0x13, 0x8, 0x5, 0xfffffffd, 0x1, 0x145}}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000000c0)={0x38, 0x2e, 0x1, 0x17, 0xb, 0xffff, 0x3, 0x8b, 0x1}) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x244100, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x11}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x0, 0x1, {0x2, 0x18, 0x13, 0x8, 0x5, 0xfffffffd, 0x1, 0x145}}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000000c0)={0x38, 0x2e, 0x1, 0x17, 0xb, 0xffff, 0x3, 0x8b, 0x1}) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x244100, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x11}) (async) 15:48:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x401, 0x20600) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x1, 0x4, 0x9, 0x9, 0x0, 0xfffffffe, 0x5f1}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000100)) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000100)) 15:48:12 executing program 3: ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={0x0, 0x1}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000400)={r1}) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000100)="b0cce161d84f2c28699ee9697d81bf9748fb925389d34f32f2e11aa699ac34a89c11f3b623ef2cb0ff7ba7ebae52ea7cbffcbd8ab811795b21cb8593f269257e111456036db3022d757dfeda53c0c1964b0e574b2850bcf652532453d7eb953ed3ccc7d1b3b37fc67194608fbcf890", 0x6f}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000180)=""/247}) 15:48:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x9}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x10}) 15:48:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000140)={0x14}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x0, 0x2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x4, 0x0, 0x1}) 15:48:12 executing program 3: ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={0x0, 0x1}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044800) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000400)={r1}) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000100)="b0cce161d84f2c28699ee9697d81bf9748fb925389d34f32f2e11aa699ac34a89c11f3b623ef2cb0ff7ba7ebae52ea7cbffcbd8ab811795b21cb8593f269257e111456036db3022d757dfeda53c0c1964b0e574b2850bcf652532453d7eb953ed3ccc7d1b3b37fc67194608fbcf890", 0x6f}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000180)=""/247}) 15:48:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x8, 0x8, 0x7], 0x3, 0x80800}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000000c0)={0x0, 0x5}) 15:48:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x401, 0x20600) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x1, 0x4, 0x9, 0x9, 0x0, 0xfffffffe, 0x5f1}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x1, 0x4, 0x9, 0x9, 0x0, 0xfffffffe, 0x5f1}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000100)) 15:48:12 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x171], 0x1, 0x80000}) 15:48:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000140)={0x14}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x0, 0x2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x4, 0x0, 0x1}) 15:48:12 executing program 3: ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={0x0, 0x1}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000400)={r1}) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000100)="b0cce161d84f2c28699ee9697d81bf9748fb925389d34f32f2e11aa699ac34a89c11f3b623ef2cb0ff7ba7ebae52ea7cbffcbd8ab811795b21cb8593f269257e111456036db3022d757dfeda53c0c1964b0e574b2850bcf652532453d7eb953ed3ccc7d1b3b37fc67194608fbcf890", 0x6f}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000180)=""/247}) 15:48:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x8, 0x8, 0x7], 0x3, 0x80800}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000000c0)={0x0, 0x5}) 15:48:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x9}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x10}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x9}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x10}) (async) 15:48:12 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) 15:48:12 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x3ff, 0x0, 0x8, 0xad5], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000140)={0x14}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x0, 0x2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x4, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x4, 0x0, 0x1}) 15:48:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x408400) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000040)={0x3}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000000)={0x998, 0x10004, 0x7ff, 0x2}) 15:48:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0xa91c3) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$rtc(&(0x7f0000000040), 0x9, 0x50000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6, 0x86, 0xdf, 0x3, 0x3, 0x200], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x2, 0x4, 0x0, 0x4}) 15:48:12 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x3ff, 0x0, 0x8, 0xad5], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x8, 0x8, 0x7], 0x3, 0x80800}) (async) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000000c0)={0x0, 0x5}) 15:48:12 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$RTC_VL_CLR(r1, 0x7014) 15:48:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x408400) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000040)={0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000000)={0x998, 0x10004, 0x7ff, 0x2}) 15:48:12 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x3ff, 0x0, 0x8, 0xad5], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0xa91c3) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$rtc(&(0x7f0000000040), 0x9, 0x50000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6, 0x86, 0xdf, 0x3, 0x3, 0x200], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x2, 0x4, 0x0, 0x4}) 15:48:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x7310, 0xffffff5f, 0x80000000, 0x8, 0x7, 0x2225, 0x0, 0x0, 0x2, 0x1000], 0xa, 0x80800, 0x0, 0xffffffffffffffff}) socket(0x28, 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000001c0)={0xbe, &(0x7f00000000c0)="9eae4d8c2c8a4cdd276d595ec63a6390638010af871c1edf9c441451547a12b75217fc83d7268fbf9eb9faabda338e4b4eae9fa6efc0d96255de94c54c6c4565e51d68d5948d9d36afbc4f4355457d55f710da2680300145f5bf2254e5422592bbf3820eadb1496697d7c9ccb5197ed49775e63815f8e41af95b8946bfa631b446e6ba0efdd65850a96375404b5a28747f1fa7ef2755a4a30b71fe0adab4cfdb8db7ebdf41c1b4cfb0c50f84c0aec423d6551f04c6eef091b9a75e1d7c1a"}) 15:48:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x101240) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:12 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$RTC_VL_CLR(r1, 0x7014) (async) 15:48:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x408400) (async) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000040)={0x3}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000000)={0x998, 0x10004, 0x7ff, 0x2}) 15:48:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0xa91c3) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$rtc(&(0x7f0000000040), 0x9, 0x50000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6, 0x86, 0xdf, 0x3, 0x3, 0x200], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x2, 0x4, 0x0, 0x4}) 15:48:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) 15:48:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x7310, 0xffffff5f, 0x80000000, 0x8, 0x7, 0x2225, 0x0, 0x0, 0x2, 0x1000], 0xa, 0x80800, 0x0, 0xffffffffffffffff}) socket(0x28, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000001c0)={0xbe, &(0x7f00000000c0)="9eae4d8c2c8a4cdd276d595ec63a6390638010af871c1edf9c441451547a12b75217fc83d7268fbf9eb9faabda338e4b4eae9fa6efc0d96255de94c54c6c4565e51d68d5948d9d36afbc4f4355457d55f710da2680300145f5bf2254e5422592bbf3820eadb1496697d7c9ccb5197ed49775e63815f8e41af95b8946bfa631b446e6ba0efdd65850a96375404b5a28747f1fa7ef2755a4a30b71fe0adab4cfdb8db7ebdf41c1b4cfb0c50f84c0aec423d6551f04c6eef091b9a75e1d7c1a"}) 15:48:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x3ff, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={r2, 0x81}) 15:48:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) 15:48:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x63, 0x0, '\x00', 0x1, 0x8}) r1 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x541b, &(0x7f0000000040)={'wlan0\x00'}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000040)) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x101240) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:12 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={r1, 0x2}) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000180)={r1, 0x3}) 15:48:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x7310, 0xffffff5f, 0x80000000, 0x8, 0x7, 0x2225, 0x0, 0x0, 0x2, 0x1000], 0xa, 0x80800, 0x0, 0xffffffffffffffff}) socket(0x28, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000001c0)={0xbe, &(0x7f00000000c0)="9eae4d8c2c8a4cdd276d595ec63a6390638010af871c1edf9c441451547a12b75217fc83d7268fbf9eb9faabda338e4b4eae9fa6efc0d96255de94c54c6c4565e51d68d5948d9d36afbc4f4355457d55f710da2680300145f5bf2254e5422592bbf3820eadb1496697d7c9ccb5197ed49775e63815f8e41af95b8946bfa631b446e6ba0efdd65850a96375404b5a28747f1fa7ef2755a4a30b71fe0adab4cfdb8db7ebdf41c1b4cfb0c50f84c0aec423d6551f04c6eef091b9a75e1d7c1a"}) 15:48:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) 15:48:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x63, 0x0, '\x00', 0x1, 0x8}) r1 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x541b, &(0x7f0000000040)={'wlan0\x00'}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x63, 0x0, '\x00', 0x1, 0x8}) (async) socket(0x11, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x541b, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) 15:48:12 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={r1, 0x2}) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) (async) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000180)={r1, 0x3}) (async) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000180)={r1, 0x3}) 15:48:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x101240) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x10}) 15:48:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x63, 0x0, '\x00', 0x1, 0x8}) r1 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x541b, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x3ff, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x3ff, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={r2, 0x81}) 15:48:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x34, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:13 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={r1, 0x2}) (async) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000180)={r1, 0x3}) 15:48:13 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x9], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x6}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x10}) 15:48:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) 15:48:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x10}) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x10}) 15:48:14 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x9], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x6}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:14 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x581, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x5, 0x2c, 0x14, 0x19, 0xa, 0x3, 0x3, 0x144}}) 15:48:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) 15:48:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x34, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:14 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x270, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4b}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x5, 0x2, "1c"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x210, 0x3, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc2, 0x2, "dd8bf9b648fe146adda2685f1840de059191b9d3d55f862fab3129d9a0cb74399ed28cd55630565362a1c8622a4fbc7528eaa05e547e08ced4d69e39387daad79b5e683e91f2a4e4d04835fd828ae012e72f8945fb0b8177f676a97c8b93d78f05642dadfb7dbea5295dcf28ef7c3156232d3059c23317266f8f6134a4371e03d46c288e7264437d39d9b897062e51d007c86ea69f2cd6cedcfa2eb69f9316b2e9911b684050520ccba6a1943769fd8801723acfd9fb7ee2052c139c83c4"}}, {0xc8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc3, 0x2, "ceb03706928c2eaa8ee5679a157c953546372e7f3e5b2e34271be10b75aa95d9ec2a03213c8dff23a497711de9f5c4894acc9274a598e25b33faf4c6b78c5293b95393c166792bc3796887b1224bb2a1344c1d512a5d7ba475b4c4e4adc67244548d4f40f5f5ae07f13fa2ca84ac38e1e526f41967087335c4a435324944c80000b233c4ea375cf713b9f581a872a4e06ca5502907b51b685df2af304be94c039ede824288891d091109c0350a01736bfd76abe612ec53e341e4b61f6c4476"}}, {0x7c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x75, 0x1, "e6a4b0509ebc13a1970baeb1a70b2177219269506d7513fbbcdc6c8ab4a4dc5d2e8c79e29abdc18f285640dc6eb7654894f5387ba89b27dd025853ba29c0394d1324fbd8e0822db450cf122feb05b28831dad8492dfa7ed3a6aef6215f22d860d496bd5b1b32c496c198826f73f70e7fa0"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8001}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x29d2}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000000)={0x9}) socket$pppoe(0x18, 0x1, 0x0) 15:48:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x3ff, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={r2, 0x81}) 15:48:15 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x581, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async, rerun: 32) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x5, 0x2c, 0x14, 0x19, 0xa, 0x3, 0x3, 0x144}}) (rerun: 32) 15:48:15 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x9], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x6}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) 15:48:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x34, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:15 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)) (async) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) (async) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x270, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4b}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x5, 0x2, "1c"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x210, 0x3, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc2, 0x2, "dd8bf9b648fe146adda2685f1840de059191b9d3d55f862fab3129d9a0cb74399ed28cd55630565362a1c8622a4fbc7528eaa05e547e08ced4d69e39387daad79b5e683e91f2a4e4d04835fd828ae012e72f8945fb0b8177f676a97c8b93d78f05642dadfb7dbea5295dcf28ef7c3156232d3059c23317266f8f6134a4371e03d46c288e7264437d39d9b897062e51d007c86ea69f2cd6cedcfa2eb69f9316b2e9911b684050520ccba6a1943769fd8801723acfd9fb7ee2052c139c83c4"}}, {0xc8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc3, 0x2, "ceb03706928c2eaa8ee5679a157c953546372e7f3e5b2e34271be10b75aa95d9ec2a03213c8dff23a497711de9f5c4894acc9274a598e25b33faf4c6b78c5293b95393c166792bc3796887b1224bb2a1344c1d512a5d7ba475b4c4e4adc67244548d4f40f5f5ae07f13fa2ca84ac38e1e526f41967087335c4a435324944c80000b233c4ea375cf713b9f581a872a4e06ca5502907b51b685df2af304be94c039ede824288891d091109c0350a01736bfd76abe612ec53e341e4b61f6c4476"}}, {0x7c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x75, 0x1, "e6a4b0509ebc13a1970baeb1a70b2177219269506d7513fbbcdc6c8ab4a4dc5d2e8c79e29abdc18f285640dc6eb7654894f5387ba89b27dd025853ba29c0394d1324fbd8e0822db450cf122feb05b28831dad8492dfa7ed3a6aef6215f22d860d496bd5b1b32c496c198826f73f70e7fa0"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8001}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x29d2}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x270, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4b}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x5, 0x2, "1c"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x210, 0x3, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc2, 0x2, "dd8bf9b648fe146adda2685f1840de059191b9d3d55f862fab3129d9a0cb74399ed28cd55630565362a1c8622a4fbc7528eaa05e547e08ced4d69e39387daad79b5e683e91f2a4e4d04835fd828ae012e72f8945fb0b8177f676a97c8b93d78f05642dadfb7dbea5295dcf28ef7c3156232d3059c23317266f8f6134a4371e03d46c288e7264437d39d9b897062e51d007c86ea69f2cd6cedcfa2eb69f9316b2e9911b684050520ccba6a1943769fd8801723acfd9fb7ee2052c139c83c4"}}, {0xc8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc3, 0x2, "ceb03706928c2eaa8ee5679a157c953546372e7f3e5b2e34271be10b75aa95d9ec2a03213c8dff23a497711de9f5c4894acc9274a598e25b33faf4c6b78c5293b95393c166792bc3796887b1224bb2a1344c1d512a5d7ba475b4c4e4adc67244548d4f40f5f5ae07f13fa2ca84ac38e1e526f41967087335c4a435324944c80000b233c4ea375cf713b9f581a872a4e06ca5502907b51b685df2af304be94c039ede824288891d091109c0350a01736bfd76abe612ec53e341e4b61f6c4476"}}, {0x7c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x75, 0x1, "e6a4b0509ebc13a1970baeb1a70b2177219269506d7513fbbcdc6c8ab4a4dc5d2e8c79e29abdc18f285640dc6eb7654894f5387ba89b27dd025853ba29c0394d1324fbd8e0822db450cf122feb05b28831dad8492dfa7ed3a6aef6215f22d860d496bd5b1b32c496c198826f73f70e7fa0"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8001}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x29d2}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000000)={0x9}) socket$pppoe(0x18, 0x1, 0x0) 15:48:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000040)={0x9, 0x4, 0x1315}) 15:48:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffc, 0x402a00) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x2}) 15:48:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)={0x81}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e0d16d94838ac54bdc", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fddbdf251c00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20040014) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000000c0)=[0x7, 0x401, 0x79, 0x7], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000380), 0x8, 0x125480) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000003c0)={0x13}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r5, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7c}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x69d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) 15:48:15 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x581, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x5, 0x2c, 0x14, 0x19, 0xa, 0x3, 0x3, 0x144}}) 15:48:15 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)) (async) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x270, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4b}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x5, 0x2, "1c"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x210, 0x3, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc2, 0x2, "dd8bf9b648fe146adda2685f1840de059191b9d3d55f862fab3129d9a0cb74399ed28cd55630565362a1c8622a4fbc7528eaa05e547e08ced4d69e39387daad79b5e683e91f2a4e4d04835fd828ae012e72f8945fb0b8177f676a97c8b93d78f05642dadfb7dbea5295dcf28ef7c3156232d3059c23317266f8f6134a4371e03d46c288e7264437d39d9b897062e51d007c86ea69f2cd6cedcfa2eb69f9316b2e9911b684050520ccba6a1943769fd8801723acfd9fb7ee2052c139c83c4"}}, {0xc8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc3, 0x2, "ceb03706928c2eaa8ee5679a157c953546372e7f3e5b2e34271be10b75aa95d9ec2a03213c8dff23a497711de9f5c4894acc9274a598e25b33faf4c6b78c5293b95393c166792bc3796887b1224bb2a1344c1d512a5d7ba475b4c4e4adc67244548d4f40f5f5ae07f13fa2ca84ac38e1e526f41967087335c4a435324944c80000b233c4ea375cf713b9f581a872a4e06ca5502907b51b685df2af304be94c039ede824288891d091109c0350a01736bfd76abe612ec53e341e4b61f6c4476"}}, {0x7c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x75, 0x1, "e6a4b0509ebc13a1970baeb1a70b2177219269506d7513fbbcdc6c8ab4a4dc5d2e8c79e29abdc18f285640dc6eb7654894f5387ba89b27dd025853ba29c0394d1324fbd8e0822db450cf122feb05b28831dad8492dfa7ed3a6aef6215f22d860d496bd5b1b32c496c198826f73f70e7fa0"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8001}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x29d2}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000000)={0x9}) socket$pppoe(0x18, 0x1, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) 15:48:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000040)={0x9, 0x4, 0x1315}) 15:48:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000000)=0x48) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:48:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)={0x81}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e0d16d94838ac54bdc", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fddbdf251c00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20040014) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000000c0)=[0x7, 0x401, 0x79, 0x7], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)) (async) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000380), 0x8, 0x125480) (async) r4 = syz_open_dev$dri(&(0x7f0000000380), 0x8, 0x125480) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000003c0)={0x13}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r5, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7c}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x69d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) 15:48:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffc, 0x402a00) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x2}) syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffc, 0x402a00) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x2}) (async) 15:48:16 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x12000, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000080)=0x75f98d23) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000), 0x2) 15:48:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x800000000001, 0xa0600) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000040)={0x9, 0x4, 0x1315}) 15:48:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffc, 0x402a00) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x2}) 15:48:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x800000000001, 0xa0600) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) 15:48:16 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x12000, 0x0) (async, rerun: 64) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000080)=0x75f98d23) (rerun: 32) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000), 0x2) 15:48:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)={0x81}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e0d16d94838ac54bdc", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fddbdf251c00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20040014) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000000c0)=[0x7, 0x401, 0x79, 0x7], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) (rerun: 64) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) (async) r4 = syz_open_dev$dri(&(0x7f0000000380), 0x8, 0x125480) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000003c0)={0x13}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r5, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7c}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x69d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) 15:48:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) 15:48:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000000)=0x48) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:48:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x800000000001, 0xa0600) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:17 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x12000, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000080)=0x75f98d23) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000), 0x2) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x12000, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000080)=0x75f98d23) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000), 0x2) (async) 15:48:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) (async) 15:48:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x200, 0x8400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x8001, 0x3, 0x10001}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000100)={0x0, &(0x7f0000000080)=""/97}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000001c0)) 15:48:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) (async) 15:48:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) 15:48:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x200, 0x8400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x8001, 0x3, 0x10001}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000100)={0x0, &(0x7f0000000080)=""/97}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000001c0)) 15:48:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) (async) 15:48:17 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000040)={r1, &(0x7f0000000140)=""/157}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) 15:48:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000000)=0x48) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000000)=0x48) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) 15:48:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x200, 0x8400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x8001, 0x3, 0x10001}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000100)={0x0, &(0x7f0000000080)=""/97}) (async, rerun: 32) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000001c0)) (rerun: 32) 15:48:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x40801) 15:48:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:18 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000040)={r1, &(0x7f0000000140)=""/157}) (async, rerun: 64) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (rerun: 64) 15:48:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000100)={0x0, &(0x7f0000000080)=""/66}) 15:48:18 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000040)={r1, &(0x7f0000000140)=""/157}) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x6, 0xfffff001, 0x2}) 15:48:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000100)={0x0, &(0x7f0000000080)=""/66}) 15:48:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x40801) 15:48:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x40101) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000200)={0x0, 0x7, 0xfffffff8, 0x4, 0x3f, 0x6a}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000001c0)={0x18}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x2000) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x26040) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000140)={0x5}) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000180)={0x0, 0xfffffffffffffff9}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x8, 0x800, 0x7, 0x6e82, 0x80, 0x4, 0x0], 0x7, 0x81000, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000440)={0xffffffffffffffff}, 0x2e, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f00000004c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x3, {0xa, 0x4e22, 0xffffffdd, @empty, 0x7ff}, r5}}, 0x38) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) recvfrom$l2tp(r3, &(0x7f0000000300)=""/33, 0x21, 0x2002, &(0x7f0000000340), 0x10) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r6, 0x40106436, &(0x7f0000000240)={0x0, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000280)={0x0, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f00000002c0)={r7, 0x7}) 15:48:19 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback, 0x4}, 0x10) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0x1}}, 0x18) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x140, 0x6, 0x1, 0x2], 0x5, 0x800, 0x0, 0xffffffffffffffff}) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x0, @link_local, 'veth1_to_bond\x00'}}, 0x1e) syz_open_dev$dri(&(0x7f00000000c0), 0x7fffffff, 0x10000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)='\x00', 0x38}) 15:48:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x6, 0xfffff001, 0x2}) 15:48:20 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000100)={0x0, &(0x7f0000000080)=""/66}) 15:48:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x40101) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000200)={0x0, 0x7, 0xfffffff8, 0x4, 0x3f, 0x6a}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000200)={0x0, 0x7, 0xfffffff8, 0x4, 0x3f, 0x6a}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000001c0)={0x18}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x2000) syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x26040) (async) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x26040) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000140)={0x5}) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) (async) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000180)={0x0, 0xfffffffffffffff9}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x8, 0x800, 0x7, 0x6e82, 0x80, 0x4, 0x0], 0x7, 0x81000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x8, 0x800, 0x7, 0x6e82, 0x80, 0x4, 0x0], 0x7, 0x81000, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000440)={0xffffffffffffffff}, 0x2e, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f00000004c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x3, {0xa, 0x4e22, 0xffffffdd, @empty, 0x7ff}, r5}}, 0x38) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) recvfrom$l2tp(r3, &(0x7f0000000300)=""/33, 0x21, 0x2002, &(0x7f0000000340), 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r6, 0x40106436, &(0x7f0000000240)={0x0, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000280)={0x0, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f00000002c0)={r7, 0x7}) (async) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f00000002c0)={r7, 0x7}) 15:48:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x40801) 15:48:20 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback, 0x4}, 0x10) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0x1}}, 0x18) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback, 0x4}, 0x10) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0x1}}, 0x18) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) 15:48:20 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback, 0x4}, 0x10) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0x1}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0x1}}, 0x18) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil}) 15:48:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x140, 0x6, 0x1, 0x2], 0x5, 0x800, 0x0, 0xffffffffffffffff}) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x0, @link_local, 'veth1_to_bond\x00'}}, 0x1e) syz_open_dev$dri(&(0x7f00000000c0), 0x7fffffff, 0x10000) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x7fffffff, 0x10000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)='\x00', 0x38}) 15:48:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x40101) (async) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000200)={0x0, 0x7, 0xfffffff8, 0x4, 0x3f, 0x6a}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000001c0)={0x18}) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x2000) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x26040) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000140)={0x5}) (async) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)) (async, rerun: 32) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000180)={0x0, 0xfffffffffffffff9}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x8, 0x800, 0x7, 0x6e82, 0x80, 0x4, 0x0], 0x7, 0x81000, 0x0, 0xffffffffffffffff}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000440)={0xffffffffffffffff}, 0x2e, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f00000004c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x3, {0xa, 0x4e22, 0xffffffdd, @empty, 0x7ff}, r5}}, 0x38) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) recvfrom$l2tp(r3, &(0x7f0000000300)=""/33, 0x21, 0x2002, &(0x7f0000000340), 0x10) (async) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_BIND(r6, 0x40106436, &(0x7f0000000240)={0x0, 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000280)={0x0, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f00000002c0)={r7, 0x7}) 15:48:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x6, 0xfffff001, 0x2}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x6, 0xfffff001, 0x2}) (async) 15:48:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x2800) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x6}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async, rerun: 64) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil}) 15:48:20 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$BLKRRPART(r0, 0x125f, 0x0) 15:48:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x2800) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x6}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x140, 0x6, 0x1, 0x2], 0x5, 0x800, 0x0, 0xffffffffffffffff}) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x0, @link_local, 'veth1_to_bond\x00'}}, 0x1e) syz_open_dev$dri(&(0x7f00000000c0), 0x7fffffff, 0x10000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)='\x00', 0x38}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x140, 0x6, 0x1, 0x2], 0x5, 0x800}) (async) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x0, @link_local, 'veth1_to_bond\x00'}}, 0x1e) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x7fffffff, 0x10000) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)='\x00', 0x38}) (async) 15:48:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x20001) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x14}) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc, &(0x7f00000001c0)="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", 0xfa) 15:48:20 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x3}) 15:48:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil}) 15:48:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x2800) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x6}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:20 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$BLKRRPART(r0, 0x125f, 0x0) 15:48:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x20001) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x14}) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc, &(0x7f00000001c0)="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", 0xfa) 15:48:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xe801) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x6, 0x0, 0x10001}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x2020c2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000040)={0x8, r2}) 15:48:20 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x3}) 15:48:20 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$BLKRRPART(r0, 0x125f, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) 15:48:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x20001) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x14}) (async) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc, &(0x7f00000001c0)="009efef25c5d2de7bc4429762ded795492b7d0270931a734f9aaf4b1f9979e0a3bc8cee34ed3f1a7d03ea97d3fee46bbe74b349fced17f93bd1b76d74153e6ea3a17a37871134b724a9e9a657256b00ead743b6c39e3524a1705a4a5e58a15f9981f072b4bf34bddf7ed96fee7cf5f82226b6a4815273fca1fdd1344980ef458ccef72cf0da3a1bfa2869a0880fcf55dc4c6c90f1cfb1743c6dc2470ca85a8c212ac80252c06d3ebb08be5f8c9477a023ea74897509441ec3a446b89e8cb8bca0c198bd6e7dac5586c9512f73d1ddb1dccb279ceb88daa08de4db188cfd50a434083830363c2dfca2b9c8a05c01484b0456eced2119ca8df7488", 0xfa) 15:48:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x800) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xe801) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x6, 0x0, 0x10001}) (async, rerun: 64) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (rerun: 64) 15:48:20 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x3}) 15:48:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x800) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x5}) 15:48:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x2020c2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000040)={0x8, r2}) 15:48:20 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x15, 0x1e, 0x8, 0x1, 0x2, 0x101, 0x6, 0xe6}}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xe801) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x6, 0x0, 0x10001}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x5}) 15:48:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x800) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x800) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) 15:48:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x2020c2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000040)={0x8, r2}) 15:48:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x401000000, 0x400000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x37a], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={0x0, 0x11}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000100)={0x0, 0x8}) 15:48:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:20 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x15, 0x1e, 0x8, 0x1, 0x2, 0x101, 0x6, 0xe6}}) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x5}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x5}) (async) 15:48:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)='Q', 0x1}) 15:48:20 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x15, 0x1e, 0x8, 0x1, 0x2, 0x101, 0x6, 0xe6}}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)='Q', 0x1}) 15:48:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x401000000, 0x400000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x37a], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={0x0, 0x11}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000100)={0x0, 0x8}) 15:48:21 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x26c240, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x40006, 0x2000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x135080, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x20, 0x2a0840) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000140)={r4, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x8, 0xc6202) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f00000002c0)={0x0, 0x8000, 0x1, 0x8, 0x80000001, 0x0, 0x3fda7bb5}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0x0) ioctl$BLKPBSZGET(r6, 0x127b, &(0x7f0000000240)) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)='Q', 0x1}) 15:48:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x401000000, 0x400000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x37a], 0x1, 0x0, 0x0, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={0x0, 0x11}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000100)={0x0, 0x8}) 15:48:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x40006, 0x2000) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x135080, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)) (async) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x20, 0x2a0840) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000140)={r4, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x8, 0xc6202) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f00000002c0)={0x0, 0x8000, 0x1, 0x8, 0x80000001, 0x0, 0x3fda7bb5}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) (async) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0x0) (async) ioctl$BLKPBSZGET(r6, 0x127b, &(0x7f0000000240)) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:21 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x26c240, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xfff, 0xfffffc00], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, '\x00', 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:48:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x401, 0x800, 0x10001], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f00000000c0)=0x2) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0x0, 0xffffffe0, 0x937, 0x5, 0x2, 0x7fffffff, 0x0, 0x2, 0x0, 0x401, 0x4}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:21 executing program 5: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000080)=0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0xcd0, 0x0, "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", 0x1, 0x3, 0x63, 0xff, 0x0, 0xfd, 0x1f}}}, 0x120) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xec6}, {0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, r2, 0x7f}}, 0x48) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:21 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x26c240, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x26c240, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x40006, 0x2000) (async, rerun: 64) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x135080, 0x0) (rerun: 64) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)) (async) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x20, 0x2a0840) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000140)={r4, 0x1}) (async) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x8, 0xc6202) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f00000002c0)={0x0, 0x8000, 0x1, 0x8, 0x80000001, 0x0, 0x3fda7bb5}) (async, rerun: 32) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (rerun: 32) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0x0) ioctl$BLKPBSZGET(r6, 0x127b, &(0x7f0000000240)) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x401, 0x800, 0x10001], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f00000000c0)=0x2) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0x0, 0xffffffe0, 0x937, 0x5, 0x2, 0x7fffffff, 0x0, 0x2, 0x0, 0x401, 0x4}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000040)) 15:48:21 executing program 5: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000080)=0x20) (async) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000080)=0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0xcd0, 0x0, "c08af41fc0b75067a9137a129bad31fde163b02abde9e25fef5bea16107484f21e0e35010679127d67de82b4be4592e8af614b9ad130ff5a547fcb0b62623e66916b20ff22b2532002d53a18c7d41bb818c7fa0064be14d5de58cae6726718fcfaa6c93511593a81b0d681110de4b14dd3807b154f2817c472083326efa366b86b03b22aca4527fea0a0e890eef259f56698c79b76d0f0c551d264a232d09e1bf5fc5f4a7a39afad61760792411d792756071ad5acd4831d7f1efdc7295f7af10db393d13fad5f7beee82af523372a445150ede80236831d2f15a422e3c9d5daf1422abb205d2a365a24909794d330ec1ad146d441b8fc7244d3a2c43a2e7ccb", 0x1, 0x3, 0x63, 0xff, 0x0, 0xfd, 0x1f}}}, 0x120) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x106, 0x8}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xec6}, {0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, r2, 0x7f}}, 0x48) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:21 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000)={0x0, 0x7f}, 0x2) 15:48:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000040)) (async) 15:48:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x401, 0x800, 0x10001], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f00000000c0)=0x2) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0x0, 0xffffffe0, 0x937, 0x5, 0x2, 0x7fffffff, 0x0, 0x2, 0x0, 0x401, 0x4}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x401, 0x800, 0x10001], 0x3}) (async) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f00000000c0)=0x2) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0x0, 0xffffffe0, 0x937, 0x5, 0x2, 0x7fffffff, 0x0, 0x2, 0x0, 0x401, 0x4}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) 15:48:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xfff, 0xfffffc00], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, '\x00', 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:48:22 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) connect$pppoe(r1, &(0x7f00000004c0)={0x18, 0x0, {0x3, @remote, 'batadv0\x00'}}, 0x1e) syz_open_dev$loop(&(0x7f0000000500), 0x2, 0x44842) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f00000000c0)={0xed38, 0x7fffffff, 0x6, 0x9}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x10000, 0x26}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x401600) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000280)=""/29, &(0x7f00000002c0)=""/254, &(0x7f00000003c0)=""/107, 0x1000}) ioctl$DRM_IOCTL_GET_CAP(r2, 0x4020940d, &(0x7f0000000140)={0x12}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000200)={r7}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000480)={0x0, 0xe8}) 15:48:22 executing program 5: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000080)=0x20) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0xcd0, 0x0, "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", 0x1, 0x3, 0x63, 0xff, 0x0, 0xfd, 0x1f}}}, 0x120) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async, rerun: 64) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x6) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xec6}, {0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, r2, 0x7f}}, 0x48) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:22 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000)={0x0, 0x7f}, 0x2) (async) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000)={0x0, 0x7f}, 0x2) 15:48:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000040)) 15:48:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)) 15:48:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)) (async) 15:48:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x4000000000000002, 0x121600) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x303e5b3d, 0x9, 0x2}) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:22 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) connect$pppoe(r1, &(0x7f00000004c0)={0x18, 0x0, {0x3, @remote, 'batadv0\x00'}}, 0x1e) (async) syz_open_dev$loop(&(0x7f0000000500), 0x2, 0x44842) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f00000000c0)={0xed38, 0x7fffffff, 0x6, 0x9}) (async) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x10000, 0x26}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x401600) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000280)=""/29, &(0x7f00000002c0)=""/254, &(0x7f00000003c0)=""/107, 0x1000}) (async) ioctl$DRM_IOCTL_GET_CAP(r2, 0x4020940d, &(0x7f0000000140)={0x12}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000200)={r7}) (async) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000480)={0x0, 0xe8}) 15:48:22 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000)={0x0, 0x7f}, 0x2) 15:48:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000140)={0x10000, 0x80000001}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f00000001c0), 0x0, 0xc0000, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000100)={r2}) 15:48:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)) 15:48:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xfff, 0xfffffc00], 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xfff, 0xfffffc00], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, '\x00', 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:48:23 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) connect$pppoe(r1, &(0x7f00000004c0)={0x18, 0x0, {0x3, @remote, 'batadv0\x00'}}, 0x1e) syz_open_dev$loop(&(0x7f0000000500), 0x2, 0x44842) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f00000000c0)={0xed38, 0x7fffffff, 0x6, 0x9}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x10000, 0x26}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x401600) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000280)=""/29, &(0x7f00000002c0)=""/254, &(0x7f00000003c0)=""/107, 0x1000}) (async) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000280)=""/29, &(0x7f00000002c0)=""/254, &(0x7f00000003c0)=""/107, 0x1000}) ioctl$DRM_IOCTL_GET_CAP(r2, 0x4020940d, &(0x7f0000000140)={0x12}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000200)={r7}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000200)={r7}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000480)={0x0, 0xe8}) (async) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000480)={0x0, 0xe8}) 15:48:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x4000000000000002, 0x121600) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x303e5b3d, 0x9, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x303e5b3d, 0x9, 0x2}) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:23 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xc00000, 0xffffffff, 0x7], 0x3, 0x800, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0xa}}, 0x20) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) connect$pppoe(r4, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r5, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x4, {0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, r5}}, 0x38) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r2}}, 0xc) 15:48:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async, rerun: 32) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000140)={0x10000, 0x80000001}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f00000001c0), 0x0, 0xc0000, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000100)={r2}) 15:48:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x181000) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[{}], 0x7, 0x0, '\x00', 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0xfffffffb, 0xe0e5, 0x8, 0x8, 0x400, 0x9, 0x852, 0x1000, 0x1], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x1, 0x3, 0x4, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000080)="dfd4172e715f92ce6da9ae1b0df8fa549d857ad120485d4577deec448fbe7836ed5ce1aa009a0b2c8cc85862b4d70cf9427012dc1fdb632ebe6ec9df0ccee3a98945a7d48d4244e77bfea5d55dd73b635ee51d966659357d8e6307f55f0fbbc02993942eef2370f2ed1184433da26b0f40314da99360fa85ca7ba3f8eba39efebc44240b41a8fa917d241e5dcec2523a29d8af0763089c8c9941730f8395c72b71cb36aae01b542d560245750c751fc8f48001dffc71a0ffbb461887ff37359563c6", 0xc2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000500)={0x2, 0x2}, 0x2) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f00000004c0)={0x0, 0x32}) 15:48:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x181000) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[{}], 0x7, 0x0, '\x00', 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0xfffffffb, 0xe0e5, 0x8, 0x8, 0x400, 0x9, 0x852, 0x1000, 0x1], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x1, 0x3, 0x4, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000080)="dfd4172e715f92ce6da9ae1b0df8fa549d857ad120485d4577deec448fbe7836ed5ce1aa009a0b2c8cc85862b4d70cf9427012dc1fdb632ebe6ec9df0ccee3a98945a7d48d4244e77bfea5d55dd73b635ee51d966659357d8e6307f55f0fbbc02993942eef2370f2ed1184433da26b0f40314da99360fa85ca7ba3f8eba39efebc44240b41a8fa917d241e5dcec2523a29d8af0763089c8c9941730f8395c72b71cb36aae01b542d560245750c751fc8f48001dffc71a0ffbb461887ff37359563c6", 0xc2}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000080)="dfd4172e715f92ce6da9ae1b0df8fa549d857ad120485d4577deec448fbe7836ed5ce1aa009a0b2c8cc85862b4d70cf9427012dc1fdb632ebe6ec9df0ccee3a98945a7d48d4244e77bfea5d55dd73b635ee51d966659357d8e6307f55f0fbbc02993942eef2370f2ed1184433da26b0f40314da99360fa85ca7ba3f8eba39efebc44240b41a8fa917d241e5dcec2523a29d8af0763089c8c9941730f8395c72b71cb36aae01b542d560245750c751fc8f48001dffc71a0ffbb461887ff37359563c6", 0xc2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000500)={0x2, 0x2}, 0x2) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f00000004c0)={0x0, 0x32}) 15:48:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x3, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000001c0)={r2, 0x8000000000000000}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x6}) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000040)={0x6}) 15:48:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000140)={0x10000, 0x80000001}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f00000001c0), 0x0, 0xc0000, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000100)={r2}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000100)={r2}) 15:48:23 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xc00000, 0xffffffff, 0x7], 0x3, 0x800, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0xa}}, 0x20) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) connect$pppoe(r4, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) (async) connect$pppoe(r4, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r5, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x4, {0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, r5}}, 0x38) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x4, {0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, r5}}, 0x38) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r2}}, 0xc) 15:48:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x4000000000000002, 0x121600) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x303e5b3d, 0x9, 0x2}) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x3, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000001c0)={r2, 0x8000000000000000}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x6}) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000040)={0x6}) (async) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000040)={0x6}) 15:48:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)={0x4fb7, 0xd81, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x2000000000000001, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=""/92}) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0xa, 0x12, 0x1, 0x15, 0x1, 0x5, 0x5, 0x35, 0x3563c88fd692934d}}) 15:48:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x181000) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[{}], 0x7, 0x0, '\x00', 0x5, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0xfffffffb, 0xe0e5, 0x8, 0x8, 0x400, 0x9, 0x852, 0x1000, 0x1], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x1, 0x3, 0x4, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000080)="dfd4172e715f92ce6da9ae1b0df8fa549d857ad120485d4577deec448fbe7836ed5ce1aa009a0b2c8cc85862b4d70cf9427012dc1fdb632ebe6ec9df0ccee3a98945a7d48d4244e77bfea5d55dd73b635ee51d966659357d8e6307f55f0fbbc02993942eef2370f2ed1184433da26b0f40314da99360fa85ca7ba3f8eba39efebc44240b41a8fa917d241e5dcec2523a29d8af0763089c8c9941730f8395c72b71cb36aae01b542d560245750c751fc8f48001dffc71a0ffbb461887ff37359563c6", 0xc2}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000500)={0x2, 0x2}, 0x2) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f00000004c0)={0x0, 0x32}) 15:48:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) socket(0x15, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:24 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 15:48:24 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xc00000, 0xffffffff, 0x7], 0x3, 0x800, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0xa}}, 0x20) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) (async, rerun: 32) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) (async, rerun: 32) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) (async, rerun: 32) connect$pppoe(r4, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r5, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) (async, rerun: 32) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x4, {0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, r5}}, 0x38) (async, rerun: 32) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r2}}, 0xc) 15:48:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x3, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000001c0)={r2, 0x8000000000000000}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x6}) (async) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000040)={0x6}) 15:48:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) socket(0x15, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)={0x4fb7, 0xd81, 0x1}) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x2000000000000001, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async, rerun: 64) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=""/92}) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0xa, 0x12, 0x1, 0x15, 0x1, 0x5, 0x5, 0x35, 0x3563c88fd692934d}}) 15:48:24 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 15:48:24 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_DEBUG={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000180)={0x1, 0x80}, 0x2) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000001c0)={0x1, 0x9, 0x0, [{0xff, 0x1, 0x0, 0x20, 0x80, 0x4, 0xff, '\x00', 0x2}, {0x4, 0x1, 0x3, 0x4, 0xf9, 0x2, 0x2, '\x00', 0x7}, {0x2e4eb155, 0x5, 0x2, 0x1, 0x80, 0x3, 0x0, '\x00', 0x40}, {0x9, 0x100000001, 0xabc0, 0x1, 0x5, 0x9, 0x8, '\x00', 0x800}, {0x100000000, 0x8, 0x2, 0x80, 0x0, 0x9, 0xff, '\x00', 0x2}, {0x0, 0x100000001, 0x1, 0x3, 0x3f, 0x40, 0x2, '\x00', 0x9}, {0x0, 0x69f, 0x8001, 0x9, 0x78, 0x9, 0xc7, '\x00', 0x3ff}, {0x7fff, 0x275, 0x0, 0x6, 0x40, 0xc5, 0x1, '\x00', 0x3}, {0x8000, 0x9, 0x8, 0x2, 0x1, 0x2, 0x6, '\x00', 0xffffffffffffffe3}]}) 15:48:24 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r1, 0x4008af75, &(0x7f0000000300)={0x3, 0xffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000100)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r4, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r4, 0x8008af73, &(0x7f0000000340)={0x0, 0x92, ""/146}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f00000001c0)={0x3, 0x80000000}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000000)={0x3}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r6, 0x8008af73, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r7, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r7, 0x8008af73, &(0x7f0000000200)=ANY=[@ANYRES64=r2]) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r8, 0x8008af73, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f0000000280)={0x0, 0xffffffff}) 15:48:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) socket(0x15, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x8}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) 15:48:24 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) 15:48:24 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_DEBUG={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_DEBUG={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000180)={0x1, 0x80}, 0x2) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000001c0)={0x1, 0x9, 0x0, [{0xff, 0x1, 0x0, 0x20, 0x80, 0x4, 0xff, '\x00', 0x2}, {0x4, 0x1, 0x3, 0x4, 0xf9, 0x2, 0x2, '\x00', 0x7}, {0x2e4eb155, 0x5, 0x2, 0x1, 0x80, 0x3, 0x0, '\x00', 0x40}, {0x9, 0x100000001, 0xabc0, 0x1, 0x5, 0x9, 0x8, '\x00', 0x800}, {0x100000000, 0x8, 0x2, 0x80, 0x0, 0x9, 0xff, '\x00', 0x2}, {0x0, 0x100000001, 0x1, 0x3, 0x3f, 0x40, 0x2, '\x00', 0x9}, {0x0, 0x69f, 0x8001, 0x9, 0x78, 0x9, 0xc7, '\x00', 0x3ff}, {0x7fff, 0x275, 0x0, 0x6, 0x40, 0xc5, 0x1, '\x00', 0x3}, {0x8000, 0x9, 0x8, 0x2, 0x1, 0x2, 0x6, '\x00', 0xffffffffffffffe3}]}) 15:48:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x8}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x8}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) (async) 15:48:24 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) (async) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r1, 0x4008af75, &(0x7f0000000300)={0x3, 0xffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000100)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r4, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r4, 0x8008af73, &(0x7f0000000340)={0x0, 0x92, ""/146}) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f00000001c0)={0x3, 0x80000000}) (async) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r6, 0x8008af73, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r7, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r7, 0x8008af73, &(0x7f0000000200)=ANY=[@ANYRES64=r2]) (async) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r8, 0x8008af73, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f0000000280)={0x0, 0xffffffff}) 15:48:24 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_DEBUG={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000180)={0x1, 0x80}, 0x2) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) (async) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000001c0)={0x1, 0x9, 0x0, [{0xff, 0x1, 0x0, 0x20, 0x80, 0x4, 0xff, '\x00', 0x2}, {0x4, 0x1, 0x3, 0x4, 0xf9, 0x2, 0x2, '\x00', 0x7}, {0x2e4eb155, 0x5, 0x2, 0x1, 0x80, 0x3, 0x0, '\x00', 0x40}, {0x9, 0x100000001, 0xabc0, 0x1, 0x5, 0x9, 0x8, '\x00', 0x800}, {0x100000000, 0x8, 0x2, 0x80, 0x0, 0x9, 0xff, '\x00', 0x2}, {0x0, 0x100000001, 0x1, 0x3, 0x3f, 0x40, 0x2, '\x00', 0x9}, {0x0, 0x69f, 0x8001, 0x9, 0x78, 0x9, 0xc7, '\x00', 0x3ff}, {0x7fff, 0x275, 0x0, 0x6, 0x40, 0xc5, 0x1, '\x00', 0x3}, {0x8000, 0x9, 0x8, 0x2, 0x1, 0x2, 0x6, '\x00', 0xffffffffffffffe3}]}) 15:48:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)={0x4fb7, 0xd81, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x2000000000000001, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=""/92}) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0xa, 0x12, 0x1, 0x15, 0x1, 0x5, 0x5, 0x35, 0x3563c88fd692934d}}) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)={0x4fb7, 0xd81, 0x1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x2000000000000001, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=""/92}) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0xa, 0x12, 0x1, 0x15, 0x1, 0x5, 0x5, 0x35, 0x3563c88fd692934d}}) (async) 15:48:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000000c0)) 15:48:25 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4e641, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) 15:48:25 executing program 0: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000680)={0x7, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_open_dev$dri(&(0x7f0000000740), 0x1, 0xae640) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000140)={0x0, &(0x7f0000000040)=""/234}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000002c0)={&(0x7f0000000240)="c54b157f03c10e34a39b6ee71781766d63dd82370bf06aef7954c3072d41f302df580908c69ce77c3cc9c4a1d8eb89bd2cadc8808ee7de7703ffd09433465aee18a756a0f1aa3d6537a2721a3d5486df8375cbbfcce51e10efd288364f1668907a48175c", 0x64}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x8, 0xffff, 0x4, 0xd4, 0x0, [0x4, 0x1f, 0x7], [0x16, 0x1, 0x7, 0x100], [0x8, 0xd, 0x80, 0x2504a91a], [0xc6, 0x100000001, 0xff7ffffffffffffa, 0x5]}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x450880, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000780)={r4, 0x3}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000540)={0x5, 0x10, 0xfa00, {&(0x7f0000000340), 0xffffffffffffffff, 0x1}}, 0x18) r5 = syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x8201) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f0000000600)={0x1, 0x5952, 0x7, 0x5}) r6 = syz_open_dev$dri(&(0x7f00000006c0), 0x2, 0x400000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000700)={0x1f, 0xe4c, 0x0, 0xe0e0e0e0}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000580)={0xee9, 0x56, 0xff}) 15:48:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x8}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) 15:48:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x74, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:48:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000000c0)) (async) 15:48:25 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) (async) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r1, 0x4008af75, &(0x7f0000000300)={0x3, 0xffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000100)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r4, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r4, 0x8008af73, &(0x7f0000000340)={0x0, 0x92, ""/146}) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f00000001c0)={0x3, 0x80000000}) (async) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r6, 0x8008af73, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r7, 0x8008af73, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r7, 0x8008af73, &(0x7f0000000200)=ANY=[@ANYRES64=r2]) (async) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r8, 0x8008af73, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f0000000280)={0x0, 0xffffffff}) 15:48:25 executing program 0: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000680)={0x7, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r0 = syz_open_dev$dri(&(0x7f0000000740), 0x1, 0xae640) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000140)={0x0, &(0x7f0000000040)=""/234}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000002c0)={&(0x7f0000000240)="c54b157f03c10e34a39b6ee71781766d63dd82370bf06aef7954c3072d41f302df580908c69ce77c3cc9c4a1d8eb89bd2cadc8808ee7de7703ffd09433465aee18a756a0f1aa3d6537a2721a3d5486df8375cbbfcce51e10efd288364f1668907a48175c", 0x64}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x8, 0xffff, 0x4, 0xd4, 0x0, [0x4, 0x1f, 0x7], [0x16, 0x1, 0x7, 0x100], [0x8, 0xd, 0x80, 0x2504a91a], [0xc6, 0x100000001, 0xff7ffffffffffffa, 0x5]}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x450880, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000780)={r4, 0x3}) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000540)={0x5, 0x10, 0xfa00, {&(0x7f0000000340), 0xffffffffffffffff, 0x1}}, 0x18) (async) r5 = syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x8201) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f0000000600)={0x1, 0x5952, 0x7, 0x5}) (async) r6 = syz_open_dev$dri(&(0x7f00000006c0), 0x2, 0x400000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000700)={0x1f, 0xe4c, 0x0, 0xe0e0e0e0}) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000580)={0xee9, 0x56, 0xff}) 15:48:25 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4e641, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) 15:48:25 executing program 1: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[{}, {}, {}], 0xff, 0x0, '\x00', 0x2, 0x3}) 15:48:25 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000000c0)) 15:48:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x7, 0x56c}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:25 executing program 0: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000680)={0x7, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r0 = syz_open_dev$dri(&(0x7f0000000740), 0x1, 0xae640) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000140)={0x0, &(0x7f0000000040)=""/234}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000002c0)={&(0x7f0000000240)="c54b157f03c10e34a39b6ee71781766d63dd82370bf06aef7954c3072d41f302df580908c69ce77c3cc9c4a1d8eb89bd2cadc8808ee7de7703ffd09433465aee18a756a0f1aa3d6537a2721a3d5486df8375cbbfcce51e10efd288364f1668907a48175c", 0x64}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x8, 0xffff, 0x4, 0xd4, 0x0, [0x4, 0x1f, 0x7], [0x16, 0x1, 0x7, 0x100], [0x8, 0xd, 0x80, 0x2504a91a], [0xc6, 0x100000001, 0xff7ffffffffffffa, 0x5]}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x450880, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000780)={r4, 0x3}) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000540)={0x5, 0x10, 0xfa00, {&(0x7f0000000340), 0xffffffffffffffff, 0x1}}, 0x18) (async) r5 = syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x8201) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f0000000600)={0x1, 0x5952, 0x7, 0x5}) r6 = syz_open_dev$dri(&(0x7f00000006c0), 0x2, 0x400000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000700)={0x1f, 0xe4c, 0x0, 0xe0e0e0e0}) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000580)={0xee9, 0x56, 0xff}) 15:48:25 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4e641, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) 15:48:25 executing program 1: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[{}, {}, {}], 0xff, 0x0, '\x00', 0x2, 0x3}) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[{}, {}, {}], 0xff, 0x0, '\x00', 0x2, 0x3}) (async) 15:48:25 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x7, 0x56c}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x74, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:48:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x1c880) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x7, 0x56c}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil}) (async) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x7, 0x56c}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) 15:48:26 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x1a5c40) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x280, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0xffffffffffffffff, 0x80) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x0, 0x4}) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x8d}, 0x2) 15:48:26 executing program 1: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[{}, {}, {}], 0xff, 0x0, '\x00', 0x2, 0x3}) 15:48:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040), &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x4, 0x0, 0x5ed3}) 15:48:26 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x1a5c40) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x280, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0xffffffffffffffff, 0x80) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x0, 0x4}) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x8d}, 0x2) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x1a5c40) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x280, 0x0) (async) syz_open_dev$loop(&(0x7f0000000180), 0xffffffffffffffff, 0x80) (async) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x0, 0x4}) (async) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x8d}, 0x2) (async) 15:48:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x4000000, 0x424481) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x7ff, 0x7, 0x4, 0x0, 0x100], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000100)={0x2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r2 = syz_open_dev$dri(&(0x7f0000000140), 0xbd1, 0x4c000) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) 15:48:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x1c880) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040), &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x4, 0x0, 0x5ed3}) 15:48:26 executing program 2: geteuid() r0 = syz_open_dev$dri(&(0x7f0000000180), 0x10002, 0x440080) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:26 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x1a5c40) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x280, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0xffffffffffffffff, 0x80) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x0, 0x4}) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x8d}, 0x2) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x1a5c40) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x280, 0x0) (async) syz_open_dev$loop(&(0x7f0000000180), 0xffffffffffffffff, 0x80) (async) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x0, 0x4}) (async) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x8d}, 0x2) (async) 15:48:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x74, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:48:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x1c880) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x4000000, 0x424481) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x7ff, 0x7, 0x4, 0x0, 0x100], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000100)={0x2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r2 = syz_open_dev$dri(&(0x7f0000000140), 0xbd1, 0x4c000) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) syz_open_dev$dri(&(0x7f0000000080), 0x4000000, 0x424481) (async) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x7ff, 0x7, 0x4, 0x0, 0x100], 0x5, 0x800}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000100)={0x2}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) syz_open_dev$dri(&(0x7f0000000140), 0xbd1, 0x4c000) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) (async) 15:48:27 executing program 2: geteuid() syz_open_dev$dri(&(0x7f0000000180), 0x10002, 0x440080) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x10002, 0x440080) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:27 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040), &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x4, 0x0, 0x5ed3}) 15:48:27 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r3, 0x8}}, 0x18) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040), 0x2) 15:48:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40080) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x12}) 15:48:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x4000000, 0x424481) (async) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x7ff, 0x7, 0x4, 0x0, 0x100], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000100)={0x2}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r2 = syz_open_dev$dri(&(0x7f0000000140), 0xbd1, 0x4c000) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) 15:48:27 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r3, 0x8}}, 0x18) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040), 0x2) 15:48:27 executing program 2: geteuid() r0 = syz_open_dev$dri(&(0x7f0000000180), 0x10002, 0x440080) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40080) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:28 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)='U', 0x1}) 15:48:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x12}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x12}) (async) 15:48:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x200003, 0x171403) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f00000000c0)={0x100, 0x6, 0x1ff, 0x7ff}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil}) 15:48:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:28 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r3, 0x8}}, 0x18) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040), 0x2) 15:48:28 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40080) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40080) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x12}) 15:48:28 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) socket$inet6_dccp(0xa, 0x6, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000240)=0xd5) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000000140)={0xffffffff80000001, 0x12ba, 0x12}}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 15:48:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x7}) 15:48:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x200003, 0x171403) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) (async) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f00000000c0)={0x100, 0x6, 0x1ff, 0x7ff}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil}) 15:48:28 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)='U', 0x1}) 15:48:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x3c, 0x24c740) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:28 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async, rerun: 32) socket$inet6_dccp(0xa, 0x6, 0x0) (async, rerun: 32) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) (async, rerun: 64) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (rerun: 64) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) (async, rerun: 64) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000240)=0xd5) (async, rerun: 64) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000000140)={0xffffffff80000001, 0x12ba, 0x12}}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 15:48:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x7}) 15:48:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x200003, 0x171403) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async, rerun: 32) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) (async, rerun: 32) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f00000000c0)={0x100, 0x6, 0x1ff, 0x7ff}) (async, rerun: 32) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil}) 15:48:28 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)='U', 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)='U', 0x1}) (async) 15:48:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x3c, 0x24c740) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$dri(&(0x7f0000000040), 0x3c, 0x24c740) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) 15:48:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x7}) 15:48:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = socket(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x89ee, &(0x7f0000000040)={'wlan0\x00'}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000000c0)={r2, &(0x7f0000000080)=""/5}) 15:48:28 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async, rerun: 32) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async, rerun: 32) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000240)=0xd5) (async) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000000140)={0xffffffff80000001, 0x12ba, 0x12}}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 15:48:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f00000000c0)={0x1, 0x3, 0xf5c7}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x6}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000040)=0x4) 15:48:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x3c, 0x24c740) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffb7fb, 0x10b000) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000001c0)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000200)={r1}) 15:48:28 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0x3f1b, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = socket(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x89ee, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000000c0)={r2, &(0x7f0000000080)=""/5}) 15:48:28 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x1}, 0x2) 15:48:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x100) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffb7fb, 0x10b000) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000001c0)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000200)={r1}) 15:48:28 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0x3f1b, 0x8}) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:29 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x1}, 0x2) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x1}, 0x2) (async) 15:48:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = socket(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x89ee, &(0x7f0000000040)={'wlan0\x00'}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000000c0)={r2, &(0x7f0000000080)=""/5}) 15:48:29 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x100) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x100) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f00000000c0)={0x1, 0x3, 0xf5c7}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x6}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000040)=0x4) 15:48:30 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffb7fb, 0x10b000) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffb7fb, 0x10b000) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000001c0)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000200)={r1}) 15:48:30 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0x3f1b, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1000, 0x6b4c01) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x40000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000280)={0x9}) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x8000002000000004, 0xa0a003) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000002c0)={0x4}) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000200)={0x9a, 0xcf, 0x2, 0x5}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r6, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r6, 0x4008af14, &(0x7f0000000340)={0x3, 0x1}) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r5, 0x4008af14, &(0x7f0000000140)={0x0, 0x20}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10001}) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r8, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f0000000300)={0x0, 0x80000000, 0x0, 0x10000, 0x3, 0x9, 0x5, 0x1, 0x7, 0x5, 0x8000, 0x4}) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f0000000100)={0x7fff, r7}) 15:48:30 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x1}, 0x2) 15:48:30 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x100) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x100) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x400000000000401, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000040)={0x10001, 0x5}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:30 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000000)) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x10880) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x14}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x220000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000001c0)) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000140)={0x43, &(0x7f00000000c0)="31a2aa1a5301e2c15f927ce8e607dbfbf06cde53b51eff690d51f6c4d0a140e71a824e4dfc37f84e3042105a23b659c20e04bfada5da00731dd035f2d28ee106c6a1a4"}) 15:48:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1000, 0x6b4c01) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x40000) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) (async, rerun: 64) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x4}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000280)={0x9}) (async) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x8000002000000004, 0xa0a003) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000002c0)={0x4}) (async) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000200)={0x9a, 0xcf, 0x2, 0x5}) (async, rerun: 32) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r6, 0x8008af73, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r6, 0x4008af14, &(0x7f0000000340)={0x3, 0x1}) (async) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r5, 0x4008af14, &(0x7f0000000140)={0x0, 0x20}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10001}) (async) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r8, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f0000000300)={0x0, 0x80000000, 0x0, 0x10000, 0x3, 0x9, 0x5, 0x1, 0x7, 0x5, 0x8000, 0x4}) (async) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f0000000100)={0x7fff, r7}) 15:48:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x11}) 15:48:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x400000000000401, 0x0) (async) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000040)={0x10001, 0x5}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f00000000c0)={0x1, 0x3, 0xf5c7}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async, rerun: 64) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x6}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000040)=0x4) 15:48:31 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000000)) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:31 executing program 0: syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x10880) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x10880) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x14}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x220000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000001c0)) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000140)={0x43, &(0x7f00000000c0)="31a2aa1a5301e2c15f927ce8e607dbfbf06cde53b51eff690d51f6c4d0a140e71a824e4dfc37f84e3042105a23b659c20e04bfada5da00731dd035f2d28ee106c6a1a4"}) 15:48:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1000, 0x6b4c01) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x40000) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x4}) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000280)={0x9}) (async, rerun: 32) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x8000002000000004, 0xa0a003) (rerun: 32) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000002c0)={0x4}) (async) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000200)={0x9a, 0xcf, 0x2, 0x5}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r6, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r6, 0x4008af14, &(0x7f0000000340)={0x3, 0x1}) (async) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r5, 0x4008af14, &(0x7f0000000140)={0x0, 0x20}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10001}) (async) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r8, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f0000000300)={0x0, 0x80000000, 0x0, 0x10000, 0x3, 0x9, 0x5, 0x1, 0x7, 0x5, 0x8000, 0x4}) (async, rerun: 64) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f0000000100)={0x7fff, r7}) (rerun: 64) 15:48:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x11}) 15:48:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x400000000000401, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000040)={0x10001, 0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:31 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x11}) 15:48:31 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000000)) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:31 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x48aa02) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000080)={0x5}) 15:48:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x10880) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x14}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x220000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000140)={0x43, &(0x7f00000000c0)="31a2aa1a5301e2c15f927ce8e607dbfbf06cde53b51eff690d51f6c4d0a140e71a824e4dfc37f84e3042105a23b659c20e04bfada5da00731dd035f2d28ee106c6a1a4"}) 15:48:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x420400) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x4}) 15:48:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000000)={0x0, 0x57ba, 0x9, 0x7c7c7c7c}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x100000001, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000140)={r3, 0x3}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000001c0)) 15:48:31 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000240)) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) socketpair(0x6, 0x4, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd4bd12c, 0x59}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x20004095) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x7, 0x1, 0x0, [{0x7, 0x8001, 0x4, 0x7f, 0x5, 0x0, 0x8, '\x00', 0x7}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x3], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r8, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r8, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10040884) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040)={0xffffffffffffffff}, 0x4, {0xa, 0x4e20, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x101}}}, 0x38) r10 = syz_open_dev$dri(&(0x7f00000003c0), 0x100000000, 0x180) r11 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r11, 0xc008af12, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r11, &(0x7f00000005c0)={0x2, 0x6}, 0x2) ioctl$DRM_IOCTL_ADD_BUFS(r10, 0xc0206416, &(0x7f0000000400)={0x7fffffff, 0x4, 0x8, 0x4, 0x10, 0x3}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r9}}, 0x18) 15:48:31 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x280000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0xff000000}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:31 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x48aa02) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000080)={0x5}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x48aa02) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000080)={0x5}) (async) 15:48:31 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x12000, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f00000000c0)={0x0, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ff8000/0x4000)=nil}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=""/242}) 15:48:31 executing program 5: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x280000, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x280000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0xff000000}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x420400) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x4}) syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x420400) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x4}) (async) 15:48:31 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x48aa02) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000080)={0x5}) 15:48:31 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000240)) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) socketpair(0x6, 0x4, 0x7, &(0x7f0000000280)) (async) socketpair(0x6, 0x4, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd4bd12c, 0x59}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x20004095) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x7, 0x1, 0x0, [{0x7, 0x8001, 0x4, 0x7f, 0x5, 0x0, 0x8, '\x00', 0x7}]}) (async) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x7, 0x1, 0x0, [{0x7, 0x8001, 0x4, 0x7f, 0x5, 0x0, 0x8, '\x00', 0x7}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x3], 0x1, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x3], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r8, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r8, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10040884) (async) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r8, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10040884) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x4, {0xa, 0x4e20, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x101}}}, 0x38) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040)={0xffffffffffffffff}, 0x4, {0xa, 0x4e20, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x101}}}, 0x38) r10 = syz_open_dev$dri(&(0x7f00000003c0), 0x100000000, 0x180) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r11 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r11, 0xc008af12, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r11, &(0x7f00000005c0)={0x2, 0x6}, 0x2) ioctl$DRM_IOCTL_ADD_BUFS(r10, 0xc0206416, &(0x7f0000000400)={0x7fffffff, 0x4, 0x8, 0x4, 0x10, 0x3}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r9}}, 0x18) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r9}}, 0x18) 15:48:31 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x12000, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f00000000c0)={0x0, 0x1}) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ff8000/0x4000)=nil}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=""/242}) 15:48:31 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x280000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0xff000000}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x1, 0x80, 0x9, 0x3, 0x8, 0x0, 0x0, 0x4eed, 0x30, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000040)}, 0x860, 0x4, 0x81, 0xbfab7f117a1ae89d, 0x1, 0x5, 0x3, 0x0, 0x7a8a4319}) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/349]) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x4}) 15:48:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000000)={0x0, 0x57ba, 0x9, 0x7c7c7c7c}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x100000001, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000140)={r3, 0x3}) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000001c0)) 15:48:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x420400) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x4}) syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x420400) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x4}) (async) 15:48:32 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000240)) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) socketpair(0x6, 0x4, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd4bd12c, 0x59}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x20004095) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x7, 0x1, 0x0, [{0x7, 0x8001, 0x4, 0x7f, 0x5, 0x0, 0x8, '\x00', 0x7}]}) (async) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x7, 0x1, 0x0, [{0x7, 0x8001, 0x4, 0x7f, 0x5, 0x0, 0x8, '\x00', 0x7}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x3], 0x1, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x3], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x2) (async) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r8, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r8, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10040884) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040)={0xffffffffffffffff}, 0x4, {0xa, 0x4e20, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x101}}}, 0x38) r10 = syz_open_dev$dri(&(0x7f00000003c0), 0x100000000, 0x180) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r11 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r11, 0xc008af12, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r11, &(0x7f00000005c0)={0x2, 0x6}, 0x2) ioctl$DRM_IOCTL_ADD_BUFS(r10, 0xc0206416, &(0x7f0000000400)={0x7fffffff, 0x4, 0x8, 0x4, 0x10, 0x3}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r10, 0xc0206416, &(0x7f0000000400)={0x7fffffff, 0x4, 0x8, 0x4, 0x10, 0x3}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r9}}, 0x18) 15:48:32 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x12000, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f00000000c0)={0x0, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ff8000/0x4000)=nil}) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=""/242}) 15:48:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000100)) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f00000000c0)={0x1003, 0x4, 0x4, 0xc1c}) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000000)={0x13}) 15:48:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async, rerun: 64) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x1, 0x80, 0x9, 0x3, 0x8, 0x0, 0x0, 0x4eed, 0x30, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000040)}, 0x860, 0x4, 0x81, 0xbfab7f117a1ae89d, 0x1, 0x5, 0x3, 0x0, 0x7a8a4319}) (async, rerun: 64) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/349]) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x4}) 15:48:32 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 15:48:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000000)={0x0, 0x57ba, 0x9, 0x7c7c7c7c}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x100000001, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000140)={r3, 0x3}) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000001c0)) 15:48:32 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x3bf880, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="6f86aa39e0dcc7b5689775ae48d57512c83839ebb2c4f2807c76eafee9ed421df48bd78468c31ef2e7417ffdf38bb6d5a7c79593f24d72c96e444afa6ad08f3c760a47ff5bfa1117697aee86fadb9f6f227417ca6434c77cf47220c1a431479657b7456fd17ed27fe55458", 0x6b, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000140)={0x9}) 15:48:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000100)) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f00000000c0)={0x1003, 0x4, 0x4, 0xc1c}) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000000)={0x13}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) (async) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f00000000c0)={0x1003, 0x4, 0x4, 0xc1c}) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000000)={0x13}) (async) 15:48:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x1, 0x80, 0x9, 0x3, 0x8, 0x0, 0x0, 0x4eed, 0x30, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000040)}, 0x860, 0x4, 0x81, 0xbfab7f117a1ae89d, 0x1, 0x5, 0x3, 0x0, 0x7a8a4319}) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000005000000000000000000010000000000050000000000000007000000000000000109807f000000000300000000000000000000000000000000000000000000000100000000000000000000000000000001000080ffffffffd801013f00000000060000000000000000000000000000000000000000000000000000000000000009000000000000000100000000000000090000000000000008ff07ff0000000000f8ffffffffffff000000000000000000000000000000000000000000000000340000000000000003000000000000000400000000000000202082b4265341e928449bc7f7ce0005810000000000000000000000000000000000000000000000000000000000000000000000000700000000000000229c00000000000002000000000000007f0508f9000000000300"/349]) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x4}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x1, 0x80, 0x9, 0x3, 0x8, 0x0, 0x0, 0x4eed, 0x30, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000040)}, 0x860, 0x4, 0x81, 0xbfab7f117a1ae89d, 0x1, 0x5, 0x3, 0x0, 0x7a8a4319}) (async) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/349]) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x4}) (async) 15:48:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0x18}) 15:48:32 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 15:48:32 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x3bf880, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="6f86aa39e0dcc7b5689775ae48d57512c83839ebb2c4f2807c76eafee9ed421df48bd78468c31ef2e7417ffdf38bb6d5a7c79593f24d72c96e444afa6ad08f3c760a47ff5bfa1117697aee86fadb9f6f227417ca6434c77cf47220c1a431479657b7456fd17ed27fe55458", 0x6b, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000140)={0x9}) 15:48:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) (async) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f00000000c0)={0x1003, 0x4, 0x4, 0xc1c}) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000000)={0x13}) 15:48:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x7, 0x4ca, 0x7fea, 0xe2, &(0x7f0000000040)=""/226, 0xb6, &(0x7f00000001c0)=""/182, 0x1000, &(0x7f0000000280)=""/4096}) 15:48:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0x18}) 15:48:33 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 15:48:33 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x3bf880, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="6f86aa39e0dcc7b5689775ae48d57512c83839ebb2c4f2807c76eafee9ed421df48bd78468c31ef2e7417ffdf38bb6d5a7c79593f24d72c96e444afa6ad08f3c760a47ff5bfa1117697aee86fadb9f6f227417ca6434c77cf47220c1a431479657b7456fd17ed27fe55458", 0x6b, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000140)={0x9}) 15:48:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x20000000, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:48:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x32, 0x1591, 0x8], 0x3, 0x80000}) 15:48:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x7, 0x4ca, 0x7fea, 0xe2, &(0x7f0000000040)=""/226, 0xb6, &(0x7f00000001c0)=""/182, 0x1000, &(0x7f0000000280)=""/4096}) 15:48:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0x18}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0x18}) (async) 15:48:33 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:33 executing program 0: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) 15:48:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x7, 0x4ca, 0x7fea, 0xe2, &(0x7f0000000040)=""/226, 0xb6, &(0x7f00000001c0)=""/182, 0x1000, &(0x7f0000000280)=""/4096}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x7, 0x4ca, 0x7fea, 0xe2, &(0x7f0000000040)=""/226, 0xb6, &(0x7f00000001c0)=""/182, 0x1000, &(0x7f0000000280)=""/4096}) (async) 15:48:34 executing program 0: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) (async) 15:48:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x32, 0x1591, 0x8], 0x3, 0x80000}) 15:48:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000002c0)={0xa9e4, 0x1, 0x80000001, 0x80000001}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000280)={0x6, 0x80000001, 0x6, 0x1e, &(0x7f0000000040)=""/30, 0xca, &(0x7f0000000080)=""/202, 0xb6, &(0x7f00000001c0)=""/182}) 15:48:34 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:34 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) connect$pppoe(r2, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) r3 = syz_open_dev$media(&(0x7f0000000700), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000800)={0x80000000, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r4, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r4, 0x11}}, 0x10) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f00000000c0)={0x4, 0x0, 0x5, 0x7fffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x20000000, 0x2, 0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:48:35 executing program 0: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) 15:48:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000002c0)={0xa9e4, 0x1, 0x80000001, 0x80000001}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000280)={0x6, 0x80000001, 0x6, 0x1e, &(0x7f0000000040)=""/30, 0xca, &(0x7f0000000080)=""/202, 0xb6, &(0x7f00000001c0)=""/182}) 15:48:35 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) (async) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x32, 0x1591, 0x8], 0x3, 0x80000}) 15:48:35 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) connect$pppoe(r2, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) r3 = syz_open_dev$media(&(0x7f0000000700), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000800)={0x80000000, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r4, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) (async, rerun: 64) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r4, 0x11}}, 0x10) (async, rerun: 64) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f00000000c0)={0x4, 0x0, 0x5, 0x7fffffff}) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) (async) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000002c0)={0xa9e4, 0x1, 0x80000001, 0x80000001}) (async) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000280)={0x6, 0x80000001, 0x6, 0x1e, &(0x7f0000000040)=""/30, 0xca, &(0x7f0000000080)=""/202, 0xb6, &(0x7f00000001c0)=""/182}) 15:48:35 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) (async) connect$pppoe(r2, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) (async) r3 = syz_open_dev$media(&(0x7f0000000700), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000800)={0x80000000, 0x0, 0x0}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r4, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r4, 0x11}}, 0x10) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f00000000c0)={0x4, 0x0, 0x5, 0x7fffffff}) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:35 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x10080) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={0x1}) 15:48:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x250400) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:35 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) connect$pppoe(r3, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r4, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x80000000, 0x5045, "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", 0x1f, 0x1, 0x20, 0x80, 0x0, 0x6, 0xc0, 0xf9}, r4}}, 0x120) 15:48:35 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x10080) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={0x1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x10080) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={0x1}) (async) 15:48:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x20000000, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:48:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x4, 0x400, 0x0, 0x3, 0x7fffffff, 0x8, 0x1ff, 0x8, 0x7, 0x5, 0x3}) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000040)={0x20, 0x5, 0x9, 0x3}) 15:48:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x250400) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:36 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) connect$pppoe(r3, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r4, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x80000000, 0x5045, "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", 0x1f, 0x1, 0x20, 0x80, 0x0, 0x6, 0xc0, 0xf9}, r4}}, 0x120) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) (async) connect$pppoe(r3, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740), 0x111, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r4, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x80000000, 0x5045, "109429c80c7ce26341bf9393e120adcb013985d19c0361cb3967788f646ad0a52de37fd724ff55a5849e03396fbe46d2ff72bb753b9cd9e580ff3e37246947d8ee52087f3c76df815f55392ce6dde62259328be5abb0fdc70fba33e65b093d190519d0340a9b6db94c057a7456610ebdb88500f35f8787ae869068ec6090b24046bc7aa50e5459a2552aa8a1d2bb0303542bc3e4c93be948e5340c1f567c399e2b84e1612e1d01a67d92ba01b5046f56cc4c4dfa74e45cd2ab52ecca16b7cc901002ed646da565b38db7745813f065922fe3cfc1753da31f7693f22ec5565c4cc8023bf40a72e06275a763d59e2d912ef4403d5e195c42091bbce158e06f1471", 0x1f, 0x1, 0x20, 0x80, 0x0, 0x6, 0xc0, 0xf9}, r4}}, 0x120) (async) 15:48:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/4096}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000080)={0x3}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x1000}) 15:48:36 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x10080) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={0x1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x10080) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={0x1}) (async) 15:48:36 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x155200) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:48:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x4, 0x400, 0x0, 0x3, 0x7fffffff, 0x8, 0x1ff, 0x8, 0x7, 0x5, 0x3}) (async, rerun: 64) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000040)={0x20, 0x5, 0x9, 0x3}) (rerun: 64) 15:48:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x250400) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/4096}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000080)={0x3}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x1000}) (async) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x1000}) 15:48:36 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) (async) connect$pppoe(r3, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r4, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x80000000, 0x5045, "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", 0x1f, 0x1, 0x20, 0x80, 0x0, 0x6, 0xc0, 0xf9}, r4}}, 0x120) 15:48:36 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x155200) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040)) (async) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:48:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x400040) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x2, 0x7, 0x4, 0x0, 0x7}) 15:48:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x4, 0x400, 0x0, 0x3, 0x7fffffff, 0x8, 0x1ff, 0x8, 0x7, 0x5, 0x3}) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000040)={0x20, 0x5, 0x9, 0x3}) 15:48:37 executing program 4: ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000080)={0x4, 0x26, 0x449a}) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000040)={0x0, 0x85ce, 0x7fff, 0x400}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x90800) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000180)) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) 15:48:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/4096}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000080)={0x3}) (async) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x1000}) 15:48:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000140)={0x10001, 0x417102f9, {}, {r2}, 0x3, 0xffffffff}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x155200) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x155200) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040)) (async) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) (async) 15:48:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000000c0)={0x8d10, 0xffff7fff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1ff, 0x107fff, 0x8, 0x2, 0x4f, 0xdc3, 0xffffffff, 0x1, 0x9], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:37 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000140)={0x10001, 0x417102f9, {}, {r2}, 0x3, 0xffffffff}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x8000000000001, 0x8000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x400040) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x2, 0x7, 0x4, 0x0, 0x7}) 15:48:37 executing program 4: ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil}) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000080)={0x4, 0x26, 0x449a}) (async) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000040)={0x0, 0x85ce, 0x7fff, 0x400}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x90800) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000180)) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) 15:48:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x12}) 15:48:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) (async) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000140)={0x10001, 0x417102f9, {}, {r2}, 0x3, 0xffffffff}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000000c0)={0x8d10, 0xffff7fff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1ff, 0x107fff, 0x8, 0x2, 0x4f, 0xdc3, 0xffffffff, 0x1, 0x9], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x8000000000001, 0x8000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000040), 0x8000000000001, 0x8000) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) 15:48:37 executing program 4: ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000080)={0x4, 0x26, 0x449a}) (async) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000040)={0x0, 0x85ce, 0x7fff, 0x400}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x90800) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000180)) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) 15:48:37 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x400040) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x400040) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x2, 0x7, 0x4, 0x0, 0x7}) 15:48:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x5}) 15:48:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x12}) 15:48:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000000c0)={0x8d10, 0xffff7fff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1ff, 0x107fff, 0x8, 0x2, 0x4f, 0xdc3, 0xffffffff, 0x1, 0x9], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000000c0)={0x8d10, 0xffff7fff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1ff, 0x107fff, 0x8, 0x2, 0x4f, 0xdc3, 0xffffffff, 0x1, 0x9], 0x9, 0x80800}) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) (async) 15:48:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x8000000000001, 0x8000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000140), 0x1, 0x1, 0x4, 0x0, 0x18}) 15:48:37 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x101003, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) 15:48:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x5}) 15:48:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x81, 0x30080) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x12}) 15:48:38 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x101003, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) 15:48:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) 15:48:38 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x81, 0x30080) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x81, 0x30080) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:38 executing program 5: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000100), 0x3f, 0x8000) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:38 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x101003, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) 15:48:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x5}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x5}) (async) 15:48:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) 15:48:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000140), 0x1, 0x1, 0x4, 0x0, 0x18}) 15:48:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x81, 0x30080) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:39 executing program 5: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_dev$rtc(&(0x7f0000000100), 0x3f, 0x8000) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000000c0)) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:39 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 15:48:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) 15:48:39 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000000)={0x7ff, 0x800, 0x6, 0x296, 0x3f, 0x80000000, 0x9}) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x5}, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x200, 0x3b2dab100af3f249) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f00000000c0)) 15:48:39 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 15:48:39 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$RTC_WIE_OFF(r0, 0x7010) (async) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000000)={0x7ff, 0x800, 0x6, 0x296, 0x3f, 0x80000000, 0x9}) (async) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x5}, 0x2) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x200, 0x3b2dab100af3f249) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f00000000c0)) 15:48:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x2}) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) 15:48:39 executing program 5: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000100), 0x3f, 0x8000) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$rtc(&(0x7f0000000100), 0x3f, 0x8000) (async) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) (async) 15:48:39 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x8000000001, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:39 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) 15:48:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000140), 0x1, 0x1, 0x4, 0x0, 0x18}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000140), 0x1, 0x1, 0x4, 0x0, 0x18}) 15:48:40 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$RTC_WIE_OFF(r0, 0x7010) (async) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000000)={0x7ff, 0x800, 0x6, 0x296, 0x3f, 0x80000000, 0x9}) (async, rerun: 64) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x5}, 0x2) (rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x200, 0x3b2dab100af3f249) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f00000000c0)) 15:48:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x2}) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) 15:48:40 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x8000000001, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x880) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xbc4, 0x80100) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r2}) 15:48:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xbc4, 0x80100) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000000040), 0xbc4, 0x80100) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r2}) (async) 15:48:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x2}) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x2}) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) (async) 15:48:40 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x8000000001, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x8000000001, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x3}) (async) 15:48:40 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x141102, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x1c) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100)={0x1, 0x40}, 0x182731d45e72d6e7) 15:48:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x880) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x880) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000100)={r2}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) 15:48:40 executing program 1: ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x3}, 0x2) 15:48:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xbc4, 0x80100) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000000040), 0xbc4, 0x80100) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r2}) (async) 15:48:41 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x141102, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x1c) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100)={0x1, 0x40}, 0x182731d45e72d6e7) 15:48:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x561082) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000080)=0x1) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000280)={0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r3, 0x80000}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000240)={0x0, &(0x7f00000001c0)=""/112}) 15:48:41 executing program 5: syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x880) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x880) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000100)={r2}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:41 executing program 1: ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000040)) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x800, 0x80000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0xfff, 0x7fff, 0x5], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1}) syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x2400) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000240)={r3, 0x7, 0x401, 0x4, 0x8001, 0x5, 0x4, 0x0, 0x1, 0x3, 0x5, 0x5}) r4 = socket(0x1d, 0x3, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x7}) 15:48:41 executing program 1: ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x220800) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000000c0)={0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x9, 0x4, 0x0, 0x9}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000140)) 15:48:41 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x141102, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x1c) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100)={0x1, 0x40}, 0x182731d45e72d6e7) 15:48:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x561082) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000080)=0x1) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000280)={0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r3, 0x80000}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000240)={0x0, &(0x7f00000001c0)=""/112}) 15:48:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x220800) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000000c0)={0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x9, 0x4, 0x0, 0x9}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x220800) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000000c0)={0x4}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x9, 0x4, 0x0, 0x9}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000140)) (async) 15:48:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x3}, 0x2) 15:48:42 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x800, 0x80000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0xfff, 0x7fff, 0x5], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1}) syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x2400) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000240)={r3, 0x7, 0x401, 0x4, 0x8001, 0x5, 0x4, 0x0, 0x1, 0x3, 0x5, 0x5}) r4 = socket(0x1d, 0x3, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x7}) 15:48:42 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x69}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040041}, 0x800) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x4e001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) 15:48:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x561082) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000080)=0x1) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000280)={0x0, 0xffffffffffffffff}) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)) (async, rerun: 32) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r3, 0x80000}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000240)={0x0, &(0x7f00000001c0)=""/112}) 15:48:42 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x242000, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x4, 0x0, 0x3}) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f00000001c0)=""/227) 15:48:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x220800) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000000c0)={0x4}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x9, 0x4, 0x0, 0x9}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000140)) 15:48:42 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x242000, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x4, 0x0, 0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f00000001c0)=""/227) 15:48:42 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x69}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040041}, 0x800) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x4e001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) 15:48:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x8, 0xa, 0x4, 0x0, 0x6461}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000140)=[0xffffffff, 0x1c000, 0x0, 0x1, 0x1, 0xf0, 0x8], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000012c0)={r2, &(0x7f00000002c0)=""/4096}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x800, 0x80000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0xfff, 0x7fff, 0x5], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1}) syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x2400) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000240)={r3, 0x7, 0x401, 0x4, 0x8001, 0x5, 0x4, 0x0, 0x1, 0x3, 0x5, 0x5}) r4 = socket(0x1d, 0x3, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x7}) (rerun: 32) 15:48:42 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0x7fffffff, 0xfffffeeb, 0x7, 0x1, 0x7, 0x40000000], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f00000000c0)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0xed, 0x90bc3) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:42 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x69}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040041}, 0x800) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x4e001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) 15:48:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x3}, 0x2) 15:48:43 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x242000, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x4, 0x0, 0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f00000001c0)=""/227) 15:48:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x8, 0xa, 0x4, 0x0, 0x6461}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000140)=[0xffffffff, 0x1c000, 0x0, 0x1, 0x1, 0xf0, 0x8], 0x7, 0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000012c0)={r2, &(0x7f00000002c0)=""/4096}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x24001) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:43 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0x7fffffff, 0xfffffeeb, 0x7, 0x1, 0x7, 0x40000000], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f00000000c0)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0xed, 0x90bc3) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000000000000001, 0x8000) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x2f, 0x7fff, 0x1, 0x5, 0x10, 0x9}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000180)) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000080)={0x2, 0x1}, 0x2) 15:48:43 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0x7fffffff, 0xfffffeeb, 0x7, 0x1, 0x7, 0x40000000], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f00000000c0)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0xed, 0x90bc3) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000000000000001, 0x8000) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x2f, 0x7fff, 0x1, 0x5, 0x10, 0x9}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000180)) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000080)={0x2, 0x1}, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x8000000000000001, 0x8000) (async) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x2f, 0x7fff, 0x1, 0x5, 0x10, 0x9}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (async) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000180)) (async) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000080)={0x2, 0x1}, 0x2) (async) 15:48:43 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x12}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2f, 0x20000) syz_open_dev$dri(&(0x7f00000002c0), 0x7, 0x200000) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000300)=""/213}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000240)={0x10000, 0x4, 0x3, 0xfffffffc}) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000200)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000280)) 15:48:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x24001) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x8, 0xa, 0x4, 0x0, 0x6461}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000140)=[0xffffffff, 0x1c000, 0x0, 0x1, 0x1, 0xf0, 0x8], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000012c0)={r2, &(0x7f00000002c0)=""/4096}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x8, 0xa, 0x4, 0x0, 0x6461}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000140)=[0xffffffff, 0x1c000, 0x0, 0x1, 0x1, 0xf0, 0x8], 0x7}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000280)) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000012c0)={r2, &(0x7f00000002c0)=""/4096}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) 15:48:43 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x2}) [ 1792.920999] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.926634] ieee802154 phy1 wpan1: encryption failed: -22 15:48:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x8, 0x279e, 0x0, 0xffffff12, 0xff, 0x100, 0xfffffff8, 0x7], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f00000000c0)={0x3, 0x5, 0x2, 0x0, 0x6, 0x4, 0x53d4}) 15:48:44 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x12}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2f, 0x20000) syz_open_dev$dri(&(0x7f00000002c0), 0x7, 0x200000) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x7, 0x200000) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000300)=""/213}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000240)={0x10000, 0x4, 0x3, 0xfffffffc}) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000200)) (async) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000200)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000280)) (async) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000280)) 15:48:44 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x24001) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x24001) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000000000000001, 0x8000) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x2f, 0x7fff, 0x1, 0x5, 0x10, 0x9}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000180)) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000080)={0x2, 0x1}, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x8000000000000001, 0x8000) (async) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x2f, 0x7fff, 0x1, 0x5, 0x10, 0x9}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (async) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000180)) (async) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000080)={0x2, 0x1}, 0x2) (async) 15:48:44 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x200) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000080)={0xffff, 0x8, {0xffffffffffffffff}, {0xee01}, 0x6, 0x100}) 15:48:44 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x2}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x2}) 15:48:44 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x2}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x2}) (async) 15:48:44 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x200) (rerun: 64) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000080)={0xffff, 0x8, {0xffffffffffffffff}, {0xee01}, 0x6, 0x100}) 15:48:44 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'geneve0\x00'}}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:44 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000001c0)={0x3e, 0x400, 0x1ab}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x3803c0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) recvfrom$l2tp(r1, &(0x7f0000000000)=""/168, 0xa8, 0x1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 15:48:44 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x12}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2f, 0x20000) syz_open_dev$dri(&(0x7f00000002c0), 0x7, 0x200000) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000300)=""/213}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000240)={0x10000, 0x4, 0x3, 0xfffffffc}) (async, rerun: 64) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000200)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000280)) 15:48:45 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000001c0)={0x3e, 0x400, 0x1ab}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x3803c0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) recvfrom$l2tp(r1, &(0x7f0000000000)=""/168, 0xa8, 0x1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 15:48:45 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x8, 0x279e, 0x0, 0xffffff12, 0xff, 0x100, 0xfffffff8, 0x7], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f00000000c0)={0x3, 0x5, 0x2, 0x0, 0x6, 0x4, 0x53d4}) 15:48:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x4000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:45 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'geneve0\x00'}}) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:45 executing program 1: ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000080)=0x3) 15:48:45 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x200) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000080)={0xffff, 0x8, {0xffffffffffffffff}, {0xee01}, 0x6, 0x100}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x200) (async) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000080)={0xffff, 0x8, {0xffffffffffffffff}, {0xee01}, 0x6, 0x100}) (async) 15:48:45 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000001c0)={0x3e, 0x400, 0x1ab}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x3803c0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) recvfrom$l2tp(r1, &(0x7f0000000000)=""/168, 0xa8, 0x1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 15:48:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x4000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:45 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'geneve0\x00'}}) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:46 executing program 1: ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000040)) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000080)=0x3) 15:48:46 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x4000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x8, 0x279e, 0x0, 0xffffff12, 0xff, 0x100, 0xfffffff8, 0x7], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f00000000c0)={0x3, 0x5, 0x2, 0x0, 0x6, 0x4, 0x53d4}) 15:48:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0x3, 0xfff, 0x1, 0x7f, 0x4, 0x4, 0x30d, 0x81, 0x0, 0x0, 0x16b}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:48:46 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:46 executing program 1: ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000080)=0x3) 15:48:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x5, 0x3, 0x0, 0x8, 0x3, 0x0, 0x81], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x3, 0x6, 0x59, &(0x7f00000001c0)=""/89, 0xda, &(0x7f0000000240)=""/218, 0xa1, &(0x7f0000000340)=""/161}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x9, 0x2], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x5, 0x3, 0x0, 0x8, 0x3, 0x0, 0x81], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x3, 0x6, 0x59, &(0x7f00000001c0)=""/89, 0xda, &(0x7f0000000240)=""/218, 0xa1, &(0x7f0000000340)=""/161}) (async) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x3, 0x6, 0x59, &(0x7f00000001c0)=""/89, 0xda, &(0x7f0000000240)=""/218, 0xa1, &(0x7f0000000340)=""/161}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x9, 0x2], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0x3, 0xfff, 0x1, 0x7f, 0x4, 0x4, 0x30d, 0x81, 0x0, 0x0, 0x16b}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)={r2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:48:47 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x4}) 15:48:47 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) 15:48:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x5, 0x3, 0x0, 0x8, 0x3, 0x0, 0x81], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x3, 0x6, 0x59, &(0x7f00000001c0)=""/89, 0xda, &(0x7f0000000240)=""/218, 0xa1, &(0x7f0000000340)=""/161}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x9, 0x2], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xba21, 0x20280) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000)=0xa9) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:48:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x4}) 15:48:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) 15:48:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0x3, 0xfff, 0x1, 0x7f, 0x4, 0x4, 0x30d, 0x81, 0x0, 0x0, 0x16b}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:48:48 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) syz_open_dev$media(&(0x7f0000000000), 0x1, 0x2000) 15:48:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000080)={r3, 0x1}) 15:48:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x4}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x4}) (async) 15:48:48 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) syz_open_dev$media(&(0x7f0000000000), 0x1, 0x2000) 15:48:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000080)={r3, 0x1}) 15:48:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xba21, 0x20280) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000)=0xa9) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) syz_open_dev$dri(&(0x7f0000000180), 0xba21, 0x20280) (async) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000)=0xa9) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) 15:48:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) (async) 15:48:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xffff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) 15:48:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x1, 0x7, 0x4, 0x1f7ee, 0x5, 0x101, 0x401}) 15:48:48 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) syz_open_dev$media(&(0x7f0000000000), 0x1, 0x2000) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) (async) syz_open_dev$media(&(0x7f0000000000), 0x1, 0x2000) (async) 15:48:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000080)={r3, 0x1}) 15:48:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xba21, 0x20280) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000)=0xa9) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) syz_open_dev$dri(&(0x7f0000000180), 0xba21, 0x20280) (async) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000)=0xa9) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) 15:48:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) 15:48:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xffff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) 15:48:48 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x1, 0x7, 0x4, 0x1f7ee, 0x5, 0x101, 0x401}) 15:48:48 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x9, 0x0, 0x8, 0xbbbbbbbb}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x40) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000100)=0x10000) 15:48:48 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x2, 0xfffffffb], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000080)=[0x7b2c], 0x1, 0x0, 0x0, 0xffffffffffffffff}) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000180)={0x1, 0x1}, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000200)={0x380000000000000, 0x0, 0x2}) 15:48:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000040)={0x8, 0x326, 0x80000001, 0x9, 0xffffffff, 0x100, 0xffffffff}) 15:48:49 executing program 3: perf_event_open$cgroup(&(0x7f0000000600)={0x790b7f6153793fb1, 0x80, 0x6, 0x20, 0x7, 0x3, 0x0, 0x4, 0x80062, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0xaaa4, 0x2, 0x9, 0x5, 0x101, 0x9, 0x3ff, 0x0, 0xf10, 0x0, 0xffffffffffff8001}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x3) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000780)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r2, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x62}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000680)={&(0x7f0000ffd000/0x1000)=nil}) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000040)={0x5, &(0x7f0000000000)=""/20, &(0x7f0000000580)=[{0x0, 0xb5, 0x1, &(0x7f00000001c0)=""/181}, {0x101, 0xdb, 0x1f, &(0x7f0000000280)=""/219}, {0x7, 0x5d, 0x7, &(0x7f0000000380)=""/93}, {0x4, 0x96, 0x9, &(0x7f0000000400)=""/150}, {0x7ff, 0x9b, 0x1f, &(0x7f00000004c0)=""/155}]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000007c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000800)={0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000880)={r5, 0x2}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000840)={r5}) 15:48:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xffff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async, rerun: 64) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) (rerun: 64) 15:48:49 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x1, 0x7, 0x4, 0x1f7ee, 0x5, 0x101, 0x401}) 15:48:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000040)={0x8, 0x326, 0x80000001, 0x9, 0xffffffff, 0x100, 0xffffffff}) 15:48:49 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x9, 0x0, 0x8, 0xbbbbbbbb}) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x40) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) (rerun: 32) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000100)=0x10000) 15:48:49 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x2, 0xfffffffb], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000080)=[0x7b2c], 0x1, 0x0, 0x0, 0xffffffffffffffff}) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000180)={0x1, 0x1}, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000200)={0x380000000000000, 0x0, 0x2}) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x2, 0xfffffffb], 0x2, 0x80800}) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000080)=[0x7b2c], 0x1}) (async) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000180)={0x1, 0x1}, 0x2) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000200)={0x380000000000000, 0x0, 0x2}) (async) 15:48:49 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffffd, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x14}) syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffa, 0x0) 15:48:49 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) connect$pppoe(r1, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r2, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x2, r2, 0x30, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xa0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 15:48:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000040)={0x8, 0x326, 0x80000001, 0x9, 0xffffffff, 0x100, 0xffffffff}) 15:48:49 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x9, 0x0, 0x8, 0xbbbbbbbb}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x40) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000100)=0x10000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x9, 0x0, 0x8, 0xbbbbbbbb}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x40) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000100)=0x10000) (async) 15:48:49 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x2, 0xfffffffb], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000080)=[0x7b2c], 0x1, 0x0, 0x0, 0xffffffffffffffff}) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000180)={0x1, 0x1}, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000200)={0x380000000000000, 0x0, 0x2}) 15:48:49 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffffd, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x14}) syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffa, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffffd, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x14}) (async) syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffa, 0x0) (async) 15:48:50 executing program 3: perf_event_open$cgroup(&(0x7f0000000600)={0x790b7f6153793fb1, 0x80, 0x6, 0x20, 0x7, 0x3, 0x0, 0x4, 0x80062, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0xaaa4, 0x2, 0x9, 0x5, 0x101, 0x9, 0x3ff, 0x0, 0xf10, 0x0, 0xffffffffffff8001}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x3) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async, rerun: 64) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000780)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r2, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x62}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000680)={&(0x7f0000ffd000/0x1000)=nil}) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000040)={0x5, &(0x7f0000000000)=""/20, &(0x7f0000000580)=[{0x0, 0xb5, 0x1, &(0x7f00000001c0)=""/181}, {0x101, 0xdb, 0x1f, &(0x7f0000000280)=""/219}, {0x7, 0x5d, 0x7, &(0x7f0000000380)=""/93}, {0x4, 0x96, 0x9, &(0x7f0000000400)=""/150}, {0x7ff, 0x9b, 0x1f, &(0x7f00000004c0)=""/155}]}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000007c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000800)={0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000880)={r5, 0x2}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000840)={r5}) 15:48:50 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) connect$pppoe(r1, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r2, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x2, r2, 0x30, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xa0) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 15:48:50 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x549480) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:50 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffffd, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x14}) syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffa, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffffd, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x14}) (async) syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffa, 0x0) (async) 15:48:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x1b}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={r2, 0x3}) syz_open_dev$dri(&(0x7f0000000080), 0x1f, 0x10002) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000140)) 15:48:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x1b}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={r2, 0x3}) syz_open_dev$dri(&(0x7f0000000080), 0x1f, 0x10002) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x1b}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={r2, 0x3}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1f, 0x10002) (async) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000140)) (async) 15:48:50 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x549480) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x549480) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) 15:48:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000000)={0x3, 0x10001, 0x101, 0x4, 0x0, 0x9, 0x6}) 15:48:50 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) (async) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) connect$pppoe(r1, &(0x7f0000000b40)={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r2, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x2, r2, 0x30, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x200}}}, 0xa0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x2, r2, 0x30, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xa0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 15:48:50 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:51 executing program 3: perf_event_open$cgroup(&(0x7f0000000600)={0x790b7f6153793fb1, 0x80, 0x6, 0x20, 0x7, 0x3, 0x0, 0x4, 0x80062, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0xaaa4, 0x2, 0x9, 0x5, 0x101, 0x9, 0x3ff, 0x0, 0xf10, 0x0, 0xffffffffffff8001}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x3) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000780)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r2, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x62}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000680)={&(0x7f0000ffd000/0x1000)=nil}) (async) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000040)={0x5, &(0x7f0000000000)=""/20, &(0x7f0000000580)=[{0x0, 0xb5, 0x1, &(0x7f00000001c0)=""/181}, {0x101, 0xdb, 0x1f, &(0x7f0000000280)=""/219}, {0x7, 0x5d, 0x7, &(0x7f0000000380)=""/93}, {0x4, 0x96, 0x9, &(0x7f0000000400)=""/150}, {0x7ff, 0x9b, 0x1f, &(0x7f00000004c0)=""/155}]}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000007c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000800)={0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000880)={r5, 0x2}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000840)={r5}) 15:48:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000000)={0x3, 0x10001, 0x101, 0x4, 0x0, 0x9, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000000)={0x3, 0x10001, 0x101, 0x4, 0x0, 0x9, 0x6}) 15:48:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x549480) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:51 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x1b}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={r2, 0x3}) syz_open_dev$dri(&(0x7f0000000080), 0x1f, 0x10002) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000140)) 15:48:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x80000000000, 0x26000) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:51 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0xde02, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000080)={0x2}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000000)) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) 15:48:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[{}], 0x4, 0x0, '\x00', 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x100, 0x6a8f], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000000c0)={0x0, 0x7}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x80000000000, 0x26000) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000000)={0x3, 0x10001, 0x101, 0x4, 0x0, 0x9, 0x6}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000000)={0x3, 0x10001, 0x101, 0x4, 0x0, 0x9, 0x6}) (async) 15:48:51 executing program 2: openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000002c0)=ANY=[@ANYBLOB="fdffffffffffffff0e865b740300000000000000000000000000000007000000000000009f5f000000000000ff0702000000000001000000000000004000000000000000000000000000000000000000000000000800000000000000ffffffff0000000005000000000000000002400300000000fd0f00000000000000000000000000248a810b98c2000000000000000000000000000000000000040000000000007f0000000000000003000000000000000340d207000000000600"/214]) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x400000) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000080)) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f00000000c0)=""/44}) syz_open_dev$dri(&(0x7f0000000040), 0x101, 0x92002) 15:48:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[{}], 0x4, 0x0, '\x00', 0x1, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x100, 0x6a8f], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000000c0)={0x0, 0x7}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:51 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0xde02, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000080)={0x2}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000000)) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) 15:48:52 executing program 3: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000000)=""/88) 15:48:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x80000000000, 0x26000) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:52 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x4}) 15:48:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[{}], 0x4, 0x0, '\x00', 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x100, 0x6a8f], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000000c0)={0x0, 0x7}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:52 executing program 2: openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000002c0)=ANY=[@ANYBLOB="fdffffffffffffff0e865b740300000000000000000000000000000007000000000000009f5f000000000000ff0702000000000001000000000000004000000000000000000000000000000000000000000000000800000000000000ffffffff0000000005000000000000000002400300000000fd0f00000000000000000000000000248a810b98c2000000000000000000000000000000000000040000000000007f0000000000000003000000000000000340d207000000000600"/214]) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x400000) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) (async) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000080)) (async, rerun: 32) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f00000000c0)=""/44}) (rerun: 32) syz_open_dev$dri(&(0x7f0000000040), 0x101, 0x92002) 15:48:52 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x1) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0xde02, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000080)={0x2}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000000)) (async, rerun: 64) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100), 0x20000102) (rerun: 64) 15:48:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000001c0)={0x8, 0x4, 0x1, 0x9}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000002c0)={&(0x7f00000001c0), &(0x7f0000000200)=[{}, {}, {}, {}], 0x3, 0x0, '\x00', 0x0, 0x4}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000140)={0x0, &(0x7f0000000040)=""/207}) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000003c0)={0x1, 0x0, 0x98, &(0x7f0000000300)={0xffffffffffffff08, 0x40, 0x3}}) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:52 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x30b000, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20040) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000100)) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000140)) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000), 0x2) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000180)={0x91, 0x8000, 0x7}) 15:48:52 executing program 3: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000000)=""/88) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000000)=""/88) (async) 15:48:52 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x4}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x4}) (async) 15:48:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000040)={0x5, 0x0, {}, {0xee01}, 0x3, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:52 executing program 2: openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000002c0)=ANY=[@ANYBLOB="fdffffffffffffff0e865b740300000000000000000000000000000007000000000000009f5f000000000000ff0702000000000001000000000000004000000000000000000000000000000000000000000000000800000000000000ffffffff0000000005000000000000000002400300000000fd0f00000000000000000000000000248a810b98c2000000000000000000000000000000000000040000000000007f0000000000000003000000000000000340d207000000000600"/214]) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x400000) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f00000000c0)=""/44}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x101, 0x92002) 15:48:52 executing program 3: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async, rerun: 32) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000000)=""/88) (rerun: 32) 15:48:52 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x30b000, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x30b000, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20040) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000100)) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000140)) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000), 0x2) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000), 0x2) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000180)={0x91, 0x8000, 0x7}) 15:48:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000001c0)={0x8, 0x4, 0x1, 0x9}) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000002c0)={&(0x7f00000001c0), &(0x7f0000000200)=[{}, {}, {}, {}], 0x3, 0x0, '\x00', 0x0, 0x4}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000140)={0x0, &(0x7f0000000040)=""/207}) (async) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000003c0)={0x1, 0x0, 0x98, &(0x7f0000000300)={0xffffffffffffff08, 0x40, 0x3}}) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000040)={0x5, 0x0, {}, {0xee01}, 0x3, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:52 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x4}) 15:48:52 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x741180, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000000c0)=""/59) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000040)=0xfffffffd) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000080)={0x1}) 15:48:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000040)=0x80) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:48:53 executing program 5: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000fbdbdf254300000008000300", @ANYRES32=r4, @ANYBLOB="0c0099007f00001b620000000c0058002400000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x5000) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000040)={0x81, 0x3, 0x0, [{0x4, 0x4, 0x80, 0x3f, 0x2, 0x1, 0xd3, '\x00', 0x1}, {0x1, 0x8, 0x7f, 0x90, 0x8, 0x5, 0x5, '\x00', 0x3}, {0x401, 0xf59, 0xfffffffffffffff7, 0x0, 0x2, 0x71, 0x7, '\x00', 0x27}]}) 15:48:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000040)={0x5, 0x0, {}, {0xee01}, 0x3, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:53 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x30b000, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20040) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000100)) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000140)) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000), 0x2) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000180)={0x91, 0x8000, 0x7}) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x30b000, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20040) (async) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000100)) (async) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000140)) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000), 0x2) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000180)={0x91, 0x8000, 0x7}) (async) 15:48:53 executing program 1: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000001c0)={0x8, 0x4, 0x1, 0x9}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000002c0)={&(0x7f00000001c0), &(0x7f0000000200)=[{}, {}, {}, {}], 0x3, 0x0, '\x00', 0x0, 0x4}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000002c0)={&(0x7f00000001c0), &(0x7f0000000200)=[{}, {}, {}, {}], 0x3, 0x0, '\x00', 0x0, 0x4}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000140)={0x0, &(0x7f0000000040)=""/207}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000140)={0x0, &(0x7f0000000040)=""/207}) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000003c0)={0x1, 0x0, 0x98, &(0x7f0000000300)={0xffffffffffffff08, 0x40, 0x3}}) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:53 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x741180, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000000c0)=""/59) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000040)=0xfffffffd) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000080)={0x1}) 15:48:53 executing program 5: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000fbdbdf254300000008000300", @ANYRES32=r4, @ANYBLOB="0c0099007f00001b620000000c0058002400000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x5000) (async) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000040)={0x81, 0x3, 0x0, [{0x4, 0x4, 0x80, 0x3f, 0x2, 0x1, 0xd3, '\x00', 0x1}, {0x1, 0x8, 0x7f, 0x90, 0x8, 0x5, 0x5, '\x00', 0x3}, {0x401, 0xf59, 0xfffffffffffffff7, 0x0, 0x2, 0x71, 0x7, '\x00', 0x27}]}) 15:48:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffff8, 0x8140) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000040)={0x80, 0x80, 0x9, 0x100, 0x3, [0x80000001, 0x0, 0x40, 0x1621], [0x6740dc1f, 0x8, 0x4, 0x5], [0x2, 0x5, 0x2, 0x4], [0x4, 0x8000, 0x13cc]}) 15:48:53 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x741180, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000000c0)=""/59) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000040)=0xfffffffd) (async) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000040)=0xfffffffd) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000080)={0x1}) 15:48:53 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 15:48:53 executing program 5: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5}) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socketpair(0x1, 0x1, 0x92, &(0x7f0000000140)={0xffffffffffffffff}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'e'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000fbdbdf254300000008000300", @ANYRES32=r4, @ANYBLOB="0c0099007f00001b620000000c0058002400000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x5000) (async) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000040)={0x81, 0x3, 0x0, [{0x4, 0x4, 0x80, 0x3f, 0x2, 0x1, 0xd3, '\x00', 0x1}, {0x1, 0x8, 0x7f, 0x90, 0x8, 0x5, 0x5, '\x00', 0x3}, {0x401, 0xf59, 0xfffffffffffffff7, 0x0, 0x2, 0x71, 0x7, '\x00', 0x27}]}) 15:48:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000040)=0x80) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:48:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffff8, 0x8140) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000040)={0x80, 0x80, 0x9, 0x100, 0x3, [0x80000001, 0x0, 0x40, 0x1621], [0x6740dc1f, 0x8, 0x4, 0x5], [0x2, 0x5, 0x2, 0x4], [0x4, 0x8000, 0x13cc]}) (rerun: 32) 15:48:54 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 15:48:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x7, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x3, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x4009, 0x7f, 0x1000005, 0xa, 0x4, 0x7], 0x3ffffffffffffd06, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:54 executing program 0: syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffff8, 0x8140) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffff8, 0x8140) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:54 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 15:48:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000040)={0x80, 0x80, 0x9, 0x100, 0x3, [0x80000001, 0x0, 0x40, 0x1621], [0x6740dc1f, 0x8, 0x4, 0x5], [0x2, 0x5, 0x2, 0x4], [0x4, 0x8000, 0x13cc]}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000040)={0x80, 0x80, 0x9, 0x100, 0x3, [0x80000001, 0x0, 0x40, 0x1621], [0x6740dc1f, 0x8, 0x4, 0x5], [0x2, 0x5, 0x2, 0x4], [0x4, 0x8000, 0x13cc]}) (async) 15:48:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x7, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) syz_open_dev$media(&(0x7f0000000040), 0x7, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) 15:48:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x3, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x4009, 0x7f, 0x1000005, 0xa, 0x4, 0x7], 0x3ffffffffffffd06, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x3, 0x100}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x4009, 0x7f, 0x1000005, 0xa, 0x4, 0x7], 0x3ffffffffffffd06, 0x80000}) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) (async) 15:48:54 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x0, 0x1, 0x2, 0x4, "d500c5dadb69d5e13e329c9f9a40e9c8185465e17d6d008b066211f8219c06fc7207360a540a3f1e3d4a42d028e0428c969713f94cc7ead7b33c2bf2682564ac060dec6331a4"}, 0x56) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3, 0x1734, 0x7, 0x5, 0x6, 0xe61, 0x7], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000140)={0x0, 0x56, ""/86}) 15:48:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async, rerun: 32) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (rerun: 32) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000040)=0x80) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:48:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x4, 0x8001, 0x10000, 0x7f, 0x10, 0x15}) 15:48:55 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000040)={0x14}) 15:48:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x7, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) syz_open_dev$media(&(0x7f0000000040), 0x7, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) 15:48:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x3, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x4009, 0x7f, 0x1000005, 0xa, 0x4, 0x7], 0x3ffffffffffffd06, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x3, 0x100}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x4009, 0x7f, 0x1000005, 0xa, 0x4, 0x7], 0x3ffffffffffffd06, 0x80000}) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) (async) 15:48:55 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x0, 0x1, 0x2, 0x4, "d500c5dadb69d5e13e329c9f9a40e9c8185465e17d6d008b066211f8219c06fc7207360a540a3f1e3d4a42d028e0428c969713f94cc7ead7b33c2bf2682564ac060dec6331a4"}, 0x56) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3, 0x1734, 0x7, 0x5, 0x6, 0xe61, 0x7], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000140)={0x0, 0x56, ""/86}) (async) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000140)={0x0, 0x56, ""/86}) 15:48:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x4, 0x8001, 0x10000, 0x7f, 0x10, 0x15}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x4, 0x8001, 0x10000, 0x7f, 0x10, 0x15}) (async) 15:48:55 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x0, 0x1, 0x2, 0x4, "d500c5dadb69d5e13e329c9f9a40e9c8185465e17d6d008b066211f8219c06fc7207360a540a3f1e3d4a42d028e0428c969713f94cc7ead7b33c2bf2682564ac060dec6331a4"}, 0x56) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3, 0x1734, 0x7, 0x5, 0x6, 0xe61, 0x7], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000140)={0x0, 0x56, ""/86}) 15:48:55 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000040)={0x14}) (rerun: 32) 15:48:55 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xffffff80, 0x4, 0x2, 0x7], 0x4, 0x0, 0x0, 0xffffffffffffffff}) connect$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x2000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x64200, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd70001cb0df25010020000500130f060018809733f4472ffc819ca1b12b0900b1621cc2ad5df57927163979d1", @ANYRES32=r3, @ANYBLOB="05001400000000000c000f00080000000000000014001f00ff0100000000000000000000000000010c0010000500000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x40, 0x400) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x4, 0x8001, 0x10000, 0x7f, 0x10, 0x15}) 15:48:56 executing program 4: ioctl$VHOST_VDPA_GET_IOVA_RANGE(0xffffffffffffffff, 0x8010af78, &(0x7f0000000140)) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000080)) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:56 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xffffff80, 0x4, 0x2, 0x7], 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xffffff80, 0x4, 0x2, 0x7], 0x4, 0x0, 0x0, 0xffffffffffffffff}) connect$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) (async) connect$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x2000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x64200, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd70001cb0df25010020000500130f060018809733f4472ffc819ca1b12b0900b1621cc2ad5df57927163979d1", @ANYRES32=r3, @ANYBLOB="05001400000000000c000f00080000000000000014001f00ff0100000000000000000000000000010c0010000500000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x40, 0x400) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:56 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000040)={0x14}) 15:48:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x100000044, 0x105880) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0x20}) 15:48:56 executing program 3: ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000000c0)={{0x80000000, 0x0, 0x0, [0x6, 0x2]}, {0x80000000, 0x0, 0x1, [0x9, 0x8000]}, 0x4, [0x49a, 0x2]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/31}) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:48:56 executing program 4: ioctl$VHOST_VDPA_GET_IOVA_RANGE(0xffffffffffffffff, 0x8010af78, &(0x7f0000000140)) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000080)) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$VHOST_VDPA_GET_IOVA_RANGE(0xffffffffffffffff, 0x8010af78, &(0x7f0000000140)) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000080)) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) 15:48:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x100000044, 0x105880) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0x20}) 15:48:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x40, 0x400) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:56 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xffffff80, 0x4, 0x2, 0x7], 0x4, 0x0, 0x0, 0xffffffffffffffff}) connect$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x2000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x64200, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd70001cb0df25010020000500130f060018809733f4472ffc819ca1b12b0900b1621cc2ad5df57927163979d1", @ANYRES32=r3, @ANYBLOB="05001400000000000c000f00080000000000000014001f00ff0100000000000000000000000000010c0010000500000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r0}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x40101, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000480)) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000400)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[{}, {}, {}], 0x401, 0x0, '\x00', 0x3, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000300)={r2, 0x80000, 0xffffffffffffffff}) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x7fffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r8, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r8, 0x6431) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000280)={r7}) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000080)=""/204, 0xcc, 0x40, &(0x7f00000001c0)={0x2, 0x0, @private}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r7}) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r9, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r9, 0xc01064ab, &(0x7f0000000240)={0x8000, 0x9fa, 0xfffffff9}) 15:48:56 executing program 4: ioctl$VHOST_VDPA_GET_IOVA_RANGE(0xffffffffffffffff, 0x8010af78, &(0x7f0000000140)) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000080)) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$VHOST_VDPA_GET_IOVA_RANGE(0xffffffffffffffff, 0x8010af78, &(0x7f0000000140)) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000080)) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) 15:48:56 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000480)) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000001c0)={r1, &(0x7f0000000080)=""/210}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000380)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}], 0x4e, 0x0, '\x00', 0x2, 0x3}) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000200)={0x13}) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x468000) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x7) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000240)=0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) 15:48:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x100000044, 0x105880) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0x20}) syz_open_dev$dri(&(0x7f0000000180), 0x100000044, 0x105880) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0x20}) (async) 15:48:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)) 15:48:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r0}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x40101, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000480)) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000400)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[{}, {}, {}], 0x401, 0x0, '\x00', 0x3, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000300)={r2, 0x80000, 0xffffffffffffffff}) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x7fffffffffffffff, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r8, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r8, 0x6431) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000280)={r7}) (async) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000080)=""/204, 0xcc, 0x40, &(0x7f00000001c0)={0x2, 0x0, @private}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r7}) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r9, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r9, 0xc01064ab, &(0x7f0000000240)={0x8000, 0x9fa, 0xfffffff9}) 15:48:56 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000480)) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000001c0)={r1, &(0x7f0000000080)=""/210}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000380)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}], 0x4e, 0x0, '\x00', 0x2, 0x3}) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000200)={0x13}) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x468000) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x7) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000240)=0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000480)) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000001c0)={r1, &(0x7f0000000080)=""/210}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000380)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}], 0x4e, 0x0, '\x00', 0x2, 0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000200)={0x13}) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x468000) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x7) (async) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000240)=0x5) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) (async) 15:48:57 executing program 3: ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000000c0)={{0x80000000, 0x0, 0x0, [0x6, 0x2]}, {0x80000000, 0x0, 0x1, [0x9, 0x8000]}, 0x4, [0x49a, 0x2]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/31}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:48:57 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48400, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)) 15:48:57 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5f}}}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@bar={{}, {0x526}, @device_a, @device_b, @multi={{0x1, 0x1, 0x1, 0x0, 0x1}, [{0x0, 0x3, {0x4, 0x80}, "65c7a43f4ecc457b"}]}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004044}, 0x40810) r0 = syz_open_dev$dri(&(0x7f0000000180), 0xe, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0xff, 0xc8, 0x1, 0x5, 0x8, 0x7d}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x7, 0x2, 0x4, 0x0, 0x1f}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) write$nbd(r1, &(0x7f0000000400)={0x67446698, 0x1, 0x4, 0x1, 0x1, "44d8edd71aba59e8b2a1d2f8bfad762bbceedaae59951bca66204941606543dbe5798a389039b9c8538180e8df40666073a4ac06fd271650903ef0c64002ba795cab7ba8882fe52b94ba6fb2d265e9d4340a379f6c6147cb17b2922a0def4011fe35fc77e43a22dcebd5ebd836436b1dcabae772f199ca9ff7d90df06f"}, 0x8d) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000280)=0x4000000) 15:48:57 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000480)) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000001c0)={r1, &(0x7f0000000080)=""/210}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000380)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}], 0x4e, 0x0, '\x00', 0x2, 0x3}) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000200)={0x13}) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x468000) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x7) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000240)=0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000480)) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000001c0)={r1, &(0x7f0000000080)=""/210}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000380)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}], 0x4e, 0x0, '\x00', 0x2, 0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000200)={0x13}) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x468000) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x7) (async) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000240)=0x5) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) (async) 15:48:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r0}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x40101, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000480)) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000400)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[{}, {}, {}], 0x401, 0x0, '\x00', 0x3, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000300)={r2, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000300)={r2, 0x80000, 0xffffffffffffffff}) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x7fffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r8, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r8, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r8, 0x6431) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000280)={r7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000280)={r7}) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000080)=""/204, 0xcc, 0x40, &(0x7f00000001c0)={0x2, 0x0, @private}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r7}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r9, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r9, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r9, 0xc01064ab, &(0x7f0000000240)={0x8000, 0x9fa, 0xfffffff9}) 15:48:57 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48400, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:57 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5f}}}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@bar={{}, {0x526}, @device_a, @device_b, @multi={{0x1, 0x1, 0x1, 0x0, 0x1}, [{0x0, 0x3, {0x4, 0x80}, "65c7a43f4ecc457b"}]}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004044}, 0x40810) r0 = syz_open_dev$dri(&(0x7f0000000180), 0xe, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0xff, 0xc8, 0x1, 0x5, 0x8, 0x7d}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x7, 0x2, 0x4, 0x0, 0x1f}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) write$nbd(r1, &(0x7f0000000400)={0x67446698, 0x1, 0x4, 0x1, 0x1, "44d8edd71aba59e8b2a1d2f8bfad762bbceedaae59951bca66204941606543dbe5798a389039b9c8538180e8df40666073a4ac06fd271650903ef0c64002ba795cab7ba8882fe52b94ba6fb2d265e9d4340a379f6c6147cb17b2922a0def4011fe35fc77e43a22dcebd5ebd836436b1dcabae772f199ca9ff7d90df06f"}, 0x8d) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000280)=0x4000000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5f}}}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@bar={{}, {0x526}, @device_a, @device_b, @multi={{0x1, 0x1, 0x1, 0x0, 0x1}, [{0x0, 0x3, {0x4, 0x80}, "65c7a43f4ecc457b"}]}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004044}, 0x40810) (async) syz_open_dev$dri(&(0x7f0000000180), 0xe, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0xff, 0xc8, 0x1, 0x5, 0x8, 0x7d}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x7, 0x2, 0x4, 0x0, 0x1f}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) write$nbd(r1, &(0x7f0000000400)={0x67446698, 0x1, 0x4, 0x1, 0x1, "44d8edd71aba59e8b2a1d2f8bfad762bbceedaae59951bca66204941606543dbe5798a389039b9c8538180e8df40666073a4ac06fd271650903ef0c64002ba795cab7ba8882fe52b94ba6fb2d265e9d4340a379f6c6147cb17b2922a0def4011fe35fc77e43a22dcebd5ebd836436b1dcabae772f199ca9ff7d90df06f"}, 0x8d) (async) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000280)=0x4000000) (async) 15:48:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)) 15:48:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:57 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000001f40)={0x0, &(0x7f0000001f00)=""/21}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000017c0)={0x0, 0x3, 0x0, &(0x7f00000013c0)=[{}, {}, {}], 0x4, 0x0, &(0x7f0000001500)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000040)=[{}, {0x0, 0x80000000, 0x0, {0x0}}], 0x5, 0x0, &(0x7f00000016c0)=[{}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000001e40)={0x0, 0x2, 0x0, &(0x7f0000001840)=[{0x80000000}, {}], 0xa, 0x0, &(0x7f0000001900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000001d80)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000001e00)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000001ec0)={{0x80000000, r4, 0x2, [0x7f]}, {r5, 0x0, 0x4, [0x8, 0xffffffff]}, 0x1, [0x8000000, 0xfcda]}) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000001380)={0x4, &(0x7f00000001c0)=""/4096, &(0x7f0000000100)=[{0x1, 0x0, 0x1, &(0x7f0000000040)}, {0x1ff, 0x62, 0xfffffffd, &(0x7f0000000080)=""/98}, {0x3, 0x9c, 0x1, &(0x7f00000011c0)=""/156}, {0xffffffff, 0xfa, 0x200, &(0x7f0000001280)=""/250}]}) 15:48:57 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48400, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) 15:48:58 executing program 3: ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000000c0)={{0x80000000, 0x0, 0x0, [0x6, 0x2]}, {0x80000000, 0x0, 0x1, [0x9, 0x8000]}, 0x4, [0x49a, 0x2]}) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/31}) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:48:58 executing program 5: syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:58 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5f}}}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@bar={{}, {0x526}, @device_a, @device_b, @multi={{0x1, 0x1, 0x1, 0x0, 0x1}, [{0x0, 0x3, {0x4, 0x80}, "65c7a43f4ecc457b"}]}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004044}, 0x40810) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0xe, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0xff, 0xc8, 0x1, 0x5, 0x8, 0x7d}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x7, 0x2, 0x4, 0x0, 0x1f}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) write$nbd(r1, &(0x7f0000000400)={0x67446698, 0x1, 0x4, 0x1, 0x1, "44d8edd71aba59e8b2a1d2f8bfad762bbceedaae59951bca66204941606543dbe5798a389039b9c8538180e8df40666073a4ac06fd271650903ef0c64002ba795cab7ba8882fe52b94ba6fb2d265e9d4340a379f6c6147cb17b2922a0def4011fe35fc77e43a22dcebd5ebd836436b1dcabae772f199ca9ff7d90df06f"}, 0x8d) (async) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000280)=0x4000000) 15:48:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x181300) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}], 0x25, 0x0, '\x00', 0x6, 0x4}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={r3, 0x14}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) 15:48:58 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 15:48:58 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000001f40)={0x0, &(0x7f0000001f00)=""/21}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) (async) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000017c0)={0x0, 0x3, 0x0, &(0x7f00000013c0)=[{}, {}, {}], 0x4, 0x0, &(0x7f0000001500)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000040)=[{}, {}], 0x5, 0x0, &(0x7f00000016c0)=[{}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000017c0)={0x0, 0x3, 0x0, &(0x7f00000013c0)=[{}, {}, {}], 0x4, 0x0, &(0x7f0000001500)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000040)=[{}, {0x0, 0x80000000, 0x0, {0x0}}], 0x5, 0x0, &(0x7f00000016c0)=[{}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000001e40)={0x0, 0x2, 0x0, &(0x7f0000001840)=[{0x80000000}, {}], 0xa, 0x0, &(0x7f0000001900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000001d80)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000001e00)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000001ec0)={{0x80000000, r4, 0x2, [0x7f]}, {r5, 0x0, 0x4, [0x8, 0xffffffff]}, 0x1, [0x8000000, 0xfcda]}) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000001380)={0x4, &(0x7f00000001c0)=""/4096, &(0x7f0000000100)=[{0x1, 0x0, 0x1, &(0x7f0000000040)}, {0x1ff, 0x62, 0xfffffffd, &(0x7f0000000080)=""/98}, {0x3, 0x9c, 0x1, &(0x7f00000011c0)=""/156}, {0xffffffff, 0xfa, 0x200, &(0x7f0000001280)=""/250}]}) 15:48:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x181300) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}], 0x25, 0x0, '\x00', 0x6, 0x4}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={r3, 0x14}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) 15:48:58 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 15:48:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:58 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000001f40)={0x0, &(0x7f0000001f00)=""/21}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000017c0)={0x0, 0x3, 0x0, &(0x7f00000013c0)=[{}, {}, {}], 0x4, 0x0, &(0x7f0000001500)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000040)=[{}, {0x0, 0x80000000, 0x0, {0x0}}], 0x5, 0x0, &(0x7f00000016c0)=[{}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000001e40)={0x0, 0x2, 0x0, &(0x7f0000001840)=[{0x80000000}, {}], 0xa, 0x0, &(0x7f0000001900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000001d80)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000001e00)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000001ec0)={{0x80000000, r4, 0x2, [0x7f]}, {r5, 0x0, 0x4, [0x8, 0xffffffff]}, 0x1, [0x8000000, 0xfcda]}) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000001380)={0x4, &(0x7f00000001c0)=""/4096, &(0x7f0000000100)=[{0x1, 0x0, 0x1, &(0x7f0000000040)}, {0x1ff, 0x62, 0xfffffffd, &(0x7f0000000080)=""/98}, {0x3, 0x9c, 0x1, &(0x7f00000011c0)=""/156}, {0xffffffff, 0xfa, 0x200, &(0x7f0000001280)=""/250}]}) 15:48:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000040)={0x1000, &(0x7f00000001c0)="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"}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) 15:48:58 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 15:48:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x224000) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000140)={0x80000000}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f00000001c0)) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x7f, 0xb9e, 0x2c89, 0x7, 0x7f, 0x4}) 15:48:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x181300) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}], 0x25, 0x0, '\x00', 0x6, 0x4}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={r3, 0x14}) (async) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={r3, 0x14}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) 15:48:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000040)={0x1000, &(0x7f00000001c0)="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"}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) 15:48:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:59 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x54981, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000040)={0x3f, 0x5, 0x101}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x3f}, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x7db, 0x8000) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0), 0x600000, 0x0) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000180)={0x0, 0x6}) 15:48:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)={0x9, r1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:48:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000040)={0x1000, &(0x7f00000001c0)="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"}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000040)={0x1000, &(0x7f00000001c0)="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"}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) (async) 15:48:59 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x54981, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000040)={0x3f, 0x5, 0x101}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x3f}, 0x2) (async) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x7db, 0x8000) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0), 0x600000, 0x0) (async) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000180)={0x0, 0x6}) 15:48:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x440000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x224000) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000140)={0x80000000}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f00000001c0)) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x7f, 0xb9e, 0x2c89, 0x7, 0x7f, 0x4}) 15:48:59 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x54981, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000040)={0x3f, 0x5, 0x101}) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x3f}, 0x2) (async) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x7db, 0x8000) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0), 0x600000, 0x0) (async) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000180)={0x0, 0x6}) 15:48:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000001c0)={0xf5, &(0x7f0000000080)="dbdf135225f9c690819f8091a8d29854711393537058c42b54f4fd684a1a5476139a50c4a0470763fbe8a1c8d4b4617909a6ad3821a57ae8c37fc7260794cd0b3a1d766530048926c47a0f9e1084512378e81e8860f0cd1a52f07e4894771849cc20a23b374dd7ca7c786696ef3818e54be18097810b7dcdd97d4cd1e0a55a46b30d30e61d2eadd8c4662cb9185d8bbdd1db2458818a2da0fc4e12c330ea7ae4f288b13ec3b0221cedc6bd7cc3b834354b5c09c9e1a736b7e558d128afc8b506b062320ee5a9cade191ea9b4cfe000efcd02321e482db08952cd6254e82847c0023d03792ccd1f48629bd445c397aab9349725e0c8"}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:48:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x440000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:48:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:48:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x224000) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000140)={0x80000000}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f00000001c0)) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x7f, 0xb9e, 0x2c89, 0x7, 0x7f, 0x4}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) (async) syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x224000) (async) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000140)={0x80000000}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f00000001c0)) (async) syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x10000) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x7f, 0xb9e, 0x2c89, 0x7, 0x7f, 0x4}) (async) 15:48:59 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0xd8101, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/61}) 15:49:00 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)={0x9, r1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x440000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000001c0)={0xf5, &(0x7f0000000080)="dbdf135225f9c690819f8091a8d29854711393537058c42b54f4fd684a1a5476139a50c4a0470763fbe8a1c8d4b4617909a6ad3821a57ae8c37fc7260794cd0b3a1d766530048926c47a0f9e1084512378e81e8860f0cd1a52f07e4894771849cc20a23b374dd7ca7c786696ef3818e54be18097810b7dcdd97d4cd1e0a55a46b30d30e61d2eadd8c4662cb9185d8bbdd1db2458818a2da0fc4e12c330ea7ae4f288b13ec3b0221cedc6bd7cc3b834354b5c09c9e1a736b7e558d128afc8b506b062320ee5a9cade191ea9b4cfe000efcd02321e482db08952cd6254e82847c0023d03792ccd1f48629bd445c397aab9349725e0c8"}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1fe, 0x14b100) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000100)={r1}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0xa0200) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x4340, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000240)) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000080)={0x10001, 0x5fe, 0xde8, 0xbeba, 0x0, 0x8}) 15:49:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x8, 0x4, 0x0, 0x81}) r2 = syz_open_dev$rtc(&(0x7f0000000140), 0xb24, 0x204900) ioctl$RTC_AIE_ON(r2, 0x7001) 15:49:00 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0xd8101, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/61}) 15:49:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x8, 0x4, 0x0, 0x81}) r2 = syz_open_dev$rtc(&(0x7f0000000140), 0xb24, 0x204900) ioctl$RTC_AIE_ON(r2, 0x7001) 15:49:00 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x380, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)=0x7fff) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:00 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0xd8101, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/61}) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0xd8101, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/61}) (async) 15:49:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1fe, 0x14b100) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000100)={r1}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0xa0200) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x4340, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000240)) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000080)={0x10001, 0x5fe, 0xde8, 0xbeba, 0x0, 0x8}) 15:49:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000001c0)={0xf5, &(0x7f0000000080)="dbdf135225f9c690819f8091a8d29854711393537058c42b54f4fd684a1a5476139a50c4a0470763fbe8a1c8d4b4617909a6ad3821a57ae8c37fc7260794cd0b3a1d766530048926c47a0f9e1084512378e81e8860f0cd1a52f07e4894771849cc20a23b374dd7ca7c786696ef3818e54be18097810b7dcdd97d4cd1e0a55a46b30d30e61d2eadd8c4662cb9185d8bbdd1db2458818a2da0fc4e12c330ea7ae4f288b13ec3b0221cedc6bd7cc3b834354b5c09c9e1a736b7e558d128afc8b506b062320ee5a9cade191ea9b4cfe000efcd02321e482db08952cd6254e82847c0023d03792ccd1f48629bd445c397aab9349725e0c8"}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x8, 0x4, 0x0, 0x81}) r2 = syz_open_dev$rtc(&(0x7f0000000140), 0xb24, 0x204900) ioctl$RTC_AIE_ON(r2, 0x7001) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x8, 0x4, 0x0, 0x81}) (async) syz_open_dev$rtc(&(0x7f0000000140), 0xb24, 0x204900) (async) ioctl$RTC_AIE_ON(r2, 0x7001) (async) [ 1809.718983] misc userio: No port type given on /dev/userio 15:49:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)={0x9, r1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)={0x9, r1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) 15:49:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1fe, 0x14b100) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000100)={r1}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0xa0200) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x4340, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000080)={0x10001, 0x5fe, 0xde8, 0xbeba, 0x0, 0x8}) 15:49:01 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000040)="1a5b4ab86fcd9405163ec8", 0xb) 15:49:01 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) (async) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x380, 0x0) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x380, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)=0x7fff) (async) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)=0x7fff) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_VDPA_SET_STATUS(r1, 0x4001af72, &(0x7f0000000100)=0x20) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000000c0)={0x3, 0x42}) 15:49:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x1, 0x10000, 0x40, 0x20, 0x10000, 0x39, 0xfffffff8}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000040)=""/60) 15:49:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x1, 0x10000, 0x40, 0x20, 0x10000, 0x39, 0xfffffff8}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000040)=""/60) 15:49:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_VDPA_SET_STATUS(r1, 0x4001af72, &(0x7f0000000100)=0x20) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000000c0)={0x3, 0x42}) 15:49:01 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000040)="1a5b4ab86fcd9405163ec8", 0xb) 15:49:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208580, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000080)=0x1) 15:49:01 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x380, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)=0x7fff) (async) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000000)={0x3}) [ 1810.662969] misc userio: No port type given on /dev/userio [ 1810.688359] misc userio: No port type given on /dev/userio 15:49:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async, rerun: 64) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async, rerun: 64) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$VHOST_VDPA_SET_STATUS(r1, 0x4001af72, &(0x7f0000000100)=0x20) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000000c0)={0x3, 0x42}) [ 1810.867092] misc userio: No port type given on /dev/userio 15:49:03 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x20000102) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000040)="1a5b4ab86fcd9405163ec8", 0xb) 15:49:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x1, 0x10000, 0x40, 0x20, 0x10000, 0x39, 0xfffffff8}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000040)=""/60) 15:49:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208580, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000080)=0x1) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208580, 0x0) (async) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000080)=0x1) (async) 15:49:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r2, 0x4008af75, &(0x7f0000000100)={0x0, 0xffff}) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x2, 0x4, 0x40, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x101, 0xffffffffffffff81, 0x8, 0x9, 0x9, 0xffffffff, 0x8, 0x0, 0xfffffff7, 0x0, 0x2}, r1, 0xd, 0xffffffffffffffff, 0x2) 15:49:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081, 0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000140)={0x0, 0x2c}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000000c0)={0x30000000, 0xbc, 0x5}) 15:49:03 executing program 0: r0 = gettid() ioctl$VHOST_VDPA_SET_VRING_ENABLE(0xffffffffffffffff, 0x4008af75, &(0x7f0000000040)={0x1, 0x7ff}) getpgrp(r0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x40) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:03 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x359c80, 0x0) 15:49:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async, rerun: 32) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (rerun: 32) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r2, 0x4008af75, &(0x7f0000000100)={0x0, 0xffff}) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x2, 0x4, 0x40, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x101, 0xffffffffffffff81, 0x8, 0x9, 0x9, 0xffffffff, 0x8, 0x0, 0xfffffff7, 0x0, 0x2}, r1, 0xd, 0xffffffffffffffff, 0x2) 15:49:03 executing program 0: r0 = gettid() (async) ioctl$VHOST_VDPA_SET_VRING_ENABLE(0xffffffffffffffff, 0x4008af75, &(0x7f0000000040)={0x1, 0x7ff}) getpgrp(r0) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x40) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7fffffff, 0x10001, 0x7}) 15:49:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208580, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000080)=0x1) (async) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000080)=0x1) 15:49:03 executing program 0: r0 = gettid() ioctl$VHOST_VDPA_SET_VRING_ENABLE(0xffffffffffffffff, 0x4008af75, &(0x7f0000000040)={0x1, 0x7ff}) (async) getpgrp(r0) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x40) (rerun: 64) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:03 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x359c80, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x359c80, 0x0) (async) 15:49:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7fffffff, 0x10001, 0x7}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7fffffff, 0x10001, 0x7}) (async) 15:49:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async, rerun: 64) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (rerun: 64) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) (async) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r2, 0x4008af75, &(0x7f0000000100)={0x0, 0xffff}) (async) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x2, 0x4, 0x40, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x101, 0xffffffffffffff81, 0x8, 0x9, 0x9, 0xffffffff, 0x8, 0x0, 0xfffffff7, 0x0, 0x2}, r1, 0xd, 0xffffffffffffffff, 0x2) 15:49:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x6}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x4cb, 0x0, '\x00', 0x2, 0x6}) 15:49:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081, 0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000140)={0x0, 0x2c}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000000c0)={0x30000000, 0xbc, 0x5}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r1}) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000140)={0x0, 0x2c}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000000c0)={0x30000000, 0xbc, 0x5}) (async) 15:49:04 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x6cd8eb6cde5f6ad8, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x14}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000000c0)={0x0, 0x1ddc, 0x19f, 0x574, 0x0, 0x9, 0x5, 0xabf, 0x8000, 0x400, 0x1def, 0x5f}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000040)={0x10000, 0x0, 0x1, 0xfff, 0x8, 0x75a}) 15:49:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7fffffff, 0x10001, 0x7}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7fffffff, 0x10001, 0x7}) (async) 15:49:04 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x359c80, 0x0) 15:49:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x6}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x4cb, 0x0, '\x00', 0x2, 0x6}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x6}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x4cb, 0x0, '\x00', 0x2, 0x6}) (async) 15:49:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000002c0)={&(0x7f0000000200)="4862f193bee6f5338bcf9f6c8a7ee0ec4cb768e7ff63dc84ce66072ec929dfb8927b96b356f8a54afec2aad6a59de0969d17aa8d1b243bdcb39ef9ebc7f5d09d04ddd44a181d6d155bbca04affdb263fcf0d90cebf1fb1db959406691ffc2074eb4e344e7d9cc0e0db35a01544bad0e66903f16f6a1f9f5ac65b34208da6b6c86db6e3b6e9351e5228a669f294", 0x8d, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000300)={r2}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000001c0)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x10}) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7fffffff, 0x0, 0x2}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x400902, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000400)={0x80000000, &(0x7f0000000340)=[{0x80000000}], &(0x7f0000000380)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f00000003c0), &(0x7f0000000400)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f00000004c0)={r7}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000440)={{r6, 0x0, 0x1, [0x6ea, 0x6]}, {r7, 0x0, 0x4, [0x80, 0x7]}, 0x2, [0x7fffffff, 0x5]}) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x1000000) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f0000000080)={r4, 0x1f}) 15:49:04 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x6cd8eb6cde5f6ad8, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x14}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000000c0)={0x0, 0x1ddc, 0x19f, 0x574, 0x0, 0x9, 0x5, 0xabf, 0x8000, 0x400, 0x1def, 0x5f}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000040)={0x10000, 0x0, 0x1, 0xfff, 0x8, 0x75a}) 15:49:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x6}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x4cb, 0x0, '\x00', 0x2, 0x6}) 15:49:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081, 0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000140)={0x0, 0x2c}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000000c0)={0x30000000, 0xbc, 0x5}) 15:49:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000002c0)={&(0x7f0000000200)="4862f193bee6f5338bcf9f6c8a7ee0ec4cb768e7ff63dc84ce66072ec929dfb8927b96b356f8a54afec2aad6a59de0969d17aa8d1b243bdcb39ef9ebc7f5d09d04ddd44a181d6d155bbca04affdb263fcf0d90cebf1fb1db959406691ffc2074eb4e344e7d9cc0e0db35a01544bad0e66903f16f6a1f9f5ac65b34208da6b6c86db6e3b6e9351e5228a669f294", 0x8d, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000300)={r2}) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000001c0)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x10}) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7fffffff, 0x0, 0x2}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x400902, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000400)={0x80000000, &(0x7f0000000340)=[{0x80000000}], &(0x7f0000000380)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f00000003c0), &(0x7f0000000400)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f00000004c0)={r7}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000440)={{r6, 0x0, 0x1, [0x6ea, 0x6]}, {r7, 0x0, 0x4, [0x80, 0x7]}, 0x2, [0x7fffffff, 0x5]}) (async) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x1000000) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f0000000080)={r4, 0x1f}) 15:49:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x202940) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:04 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x6cd8eb6cde5f6ad8, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x14}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000000c0)={0x0, 0x1ddc, 0x19f, 0x574, 0x0, 0x9, 0x5, 0xabf, 0x8000, 0x400, 0x1def, 0x5f}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000040)={0x10000, 0x0, 0x1, 0xfff, 0x8, 0x75a}) 15:49:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081, 0x0}) (async, rerun: 64) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (rerun: 64) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000040)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r1}) (async, rerun: 64) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000140)={0x0, 0x2c}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000000c0)={0x30000000, 0xbc, 0x5}) 15:49:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x20000000, 0x8, 0xfffffffffffffffb}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000040)=0x101) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil}) 15:49:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x202940) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000002c0)={&(0x7f0000000200)="4862f193bee6f5338bcf9f6c8a7ee0ec4cb768e7ff63dc84ce66072ec929dfb8927b96b356f8a54afec2aad6a59de0969d17aa8d1b243bdcb39ef9ebc7f5d09d04ddd44a181d6d155bbca04affdb263fcf0d90cebf1fb1db959406691ffc2074eb4e344e7d9cc0e0db35a01544bad0e66903f16f6a1f9f5ac65b34208da6b6c86db6e3b6e9351e5228a669f294", 0x8d, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000300)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000300)={r2}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000001c0)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x10}) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7fffffff, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7fffffff, 0x0, 0x2}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x400902, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000400)={0x80000000, &(0x7f0000000340), &(0x7f0000000380)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000400)={0x80000000, &(0x7f0000000340)=[{0x80000000}], &(0x7f0000000380)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f00000003c0), &(0x7f0000000400)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f00000004c0)={r7}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000440)={{r6, 0x0, 0x1, [0x6ea, 0x6]}, {r7, 0x0, 0x4, [0x80, 0x7]}, 0x2, [0x7fffffff, 0x5]}) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x1000000) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f0000000080)={r4, 0x1f}) 15:49:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x7}) 15:49:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x7}) 15:49:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x20000000, 0x8, 0xfffffffffffffffb}) (async) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000040)=0x101) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil}) 15:49:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) 15:49:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081, 0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000140)={0x0, 0x2c}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000000c0)={0x30000000, 0xbc, 0x5}) 15:49:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x202940) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:06 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x7}) 15:49:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) 15:49:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x10000, 0x9, 0x5811}) 15:49:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x20000000, 0x8, 0xfffffffffffffffb}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000040)=0x101) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x20000000, 0x8, 0xfffffffffffffffb}) (async) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000040)=0x101) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil}) (async) 15:49:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x7f, 0x89c}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x5}) 15:49:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) 15:49:07 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x380, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)=0x7fff) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xa00) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 15:49:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x7f, 0x89c}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x5}) [ 1816.780577] misc userio: No port type given on /dev/userio 15:49:07 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x380, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)=0x7fff) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) [ 1816.966432] misc userio: No port type given on /dev/userio 15:49:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x10000, 0x9, 0x5811}) 15:49:08 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xa00) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xa00) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x5}) 15:49:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x7f, 0x89c}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 15:49:08 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x380, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)=0x7fff) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:08 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 15:49:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0x35, 0x3, {0xffffffffffffffff}, {0xee01}, 0x81, 0x81}) 15:49:08 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x380, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)=0x7fff) [ 1817.834673] misc userio: No port type given on /dev/userio 15:49:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x80) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x1}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000000)={0x0, &(0x7f0000000080)=""/115}) 15:49:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xa00) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xa00) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) 15:49:09 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x380, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) [ 1817.987759] misc userio: No port type given on /dev/userio [ 1818.129656] misc userio: No port type given on /dev/userio 15:49:09 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x10000, 0x9, 0x5811}) 15:49:09 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 15:49:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x80) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x1}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000000)={0x0, &(0x7f0000000080)=""/115}) 15:49:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0x35, 0x3, {0xffffffffffffffff}, {0xee01}, 0x81, 0x81}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0x35, 0x3, {0xffffffffffffffff}, {0xee01}, 0x81, 0x81}) (async) 15:49:09 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x101483, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x7}) 15:49:09 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x380, 0x0) 15:49:10 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 15:49:10 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x101483, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x7}) 15:49:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0x35, 0x3, {0xffffffffffffffff}, {0xee01}, 0x81, 0x81}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0x35, 0x3, {0xffffffffffffffff}, {0xee01}, 0x81, 0x81}) (async) 15:49:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x80) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x1}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000000)={0x0, &(0x7f0000000080)=""/115}) [ 1819.013033] misc userio: No port type given on /dev/userio 15:49:10 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) 15:49:10 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x101483, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x7}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x101483, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x7}) (async) [ 1819.177435] misc userio: No port type given on /dev/userio 15:49:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x88, 0x280000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)="acf0dca0fb0e46f245e025bb79dc4367a4ae69422c057e4a82baf8c57826869dc7b71a2c6355883b44fe950f0d623da99dff170ca0c300e1faa88459a601fa75925d8203f4dfde964cd77195ca99bdd9473974bd2fbe6eb4cfb68f007e2e28b4b346d7d92473321171c0c7dcccf3de15720dddd796bfac067d17231d76137638196e45d5bedba99cbd0eb33d3a1859392a7da7fc6e2f7c6a5a3d9dd0bca5a981ac024be16db0ebb9cf41e0c61cac82bcb33f14c0ab79edb6df531e0ef185e00e581368861139a5d60e5d90a24e4bf6071e2dcd296ae292f1cb7dda33ca", 0xdd}) 15:49:11 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x380, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)=0x7fff) 15:49:11 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x4}) 15:49:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000080)={0xe, &(0x7f0000000040)="8d422b1d3e852fb377d9c02dafbb"}) 15:49:11 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) 15:49:11 executing program 2: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:11 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) [ 1820.011187] misc userio: No port type given on /dev/userio 15:49:11 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x88, 0x280000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)="acf0dca0fb0e46f245e025bb79dc4367a4ae69422c057e4a82baf8c57826869dc7b71a2c6355883b44fe950f0d623da99dff170ca0c300e1faa88459a601fa75925d8203f4dfde964cd77195ca99bdd9473974bd2fbe6eb4cfb68f007e2e28b4b346d7d92473321171c0c7dcccf3de15720dddd796bfac067d17231d76137638196e45d5bedba99cbd0eb33d3a1859392a7da7fc6e2f7c6a5a3d9dd0bca5a981ac024be16db0ebb9cf41e0c61cac82bcb33f14c0ab79edb6df531e0ef185e00e581368861139a5d60e5d90a24e4bf6071e2dcd296ae292f1cb7dda33ca", 0xdd}) 15:49:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000080)={0xe, &(0x7f0000000040)="8d422b1d3e852fb377d9c02dafbb"}) 15:49:11 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async, rerun: 64) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (rerun: 64) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x4}) 15:49:11 executing program 2: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:11 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) [ 1820.106456] misc userio: No port type given on /dev/userio [ 1820.110327] misc userio: No port type given on /dev/userio 15:49:11 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x380, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)=0x7fff) 15:49:11 executing program 2: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000040)) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) 15:49:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x1}) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x88, 0x280000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)="acf0dca0fb0e46f245e025bb79dc4367a4ae69422c057e4a82baf8c57826869dc7b71a2c6355883b44fe950f0d623da99dff170ca0c300e1faa88459a601fa75925d8203f4dfde964cd77195ca99bdd9473974bd2fbe6eb4cfb68f007e2e28b4b346d7d92473321171c0c7dcccf3de15720dddd796bfac067d17231d76137638196e45d5bedba99cbd0eb33d3a1859392a7da7fc6e2f7c6a5a3d9dd0bca5a981ac024be16db0ebb9cf41e0c61cac82bcb33f14c0ab79edb6df531e0ef185e00e581368861139a5d60e5d90a24e4bf6071e2dcd296ae292f1cb7dda33ca", 0xdd}) 15:49:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000080)={0xe, &(0x7f0000000040)="8d422b1d3e852fb377d9c02dafbb"}) 15:49:11 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x4}) 15:49:11 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) [ 1820.274933] misc userio: No port type given on /dev/userio [ 1820.334811] misc userio: No port type given on /dev/userio 15:49:11 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x380, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)=0x7fff) 15:49:11 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000200)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000001c0)={0x1a}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x101400) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="a5223968db5d0d4483107e196a857b7a76db483fde1b4458b0a278a3c5387296f2c3f82bc64fc791aa6259f4420c71f433c64fd89a0b7fe4671ecd96ff", 0x3d, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x4, 0x9, 0x8, 0x1], 0x4, 0x80000, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000002c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000100)={r2}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001340)={&(0x7f0000001300)=[0x4, 0x4, 0x2, 0x8, 0x10001], 0x5, 0x1800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r6, 0xc0106403, &(0x7f0000001380)={0x80000000, 0x9, 0x652, 0x1}) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) setsockopt$inet6_dccp_buf(r5, 0x21, 0xe, &(0x7f0000000300)="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", 0x1000) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000000)={0x9, 0x3, 0xff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000080)=0x8) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x4, 0x0, 0x1}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0x35, 0xff, 0x2, 0x1f}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000100)={0x7, 0xffffff79, 0x0, 0xfffffffd, 0x1, 0x1}) 15:49:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x1, 0x5, 0x80000001, 0xcccccccc}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) [ 1820.474151] misc userio: No port type given on /dev/userio 15:49:11 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:11 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000200)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000001c0)={0x1a}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000001c0)={0x1a}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x101400) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="a5223968db5d0d4483107e196a857b7a76db483fde1b4458b0a278a3c5387296f2c3f82bc64fc791aa6259f4420c71f433c64fd89a0b7fe4671ecd96ff", 0x3d, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x4, 0x9, 0x8, 0x1], 0x4, 0x80000, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000002c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000100)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000100)={r2}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001340)={&(0x7f0000001300)=[0x4, 0x4, 0x2, 0x8, 0x10001], 0x5, 0x1800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r6, 0xc0106403, &(0x7f0000001380)={0x80000000, 0x9, 0x652, 0x1}) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) setsockopt$inet6_dccp_buf(r5, 0x21, 0xe, &(0x7f0000000300)="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", 0x1000) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000000)={0x3}) [ 1820.565505] misc userio: No port type given on /dev/userio 15:49:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000080)=0x8) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x4, 0x0, 0x1}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0x35, 0xff, 0x2, 0x1f}) (async) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0x35, 0xff, 0x2, 0x1f}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000100)={0x7, 0xffffff79, 0x0, 0xfffffffd, 0x1, 0x1}) 15:49:11 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x380, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 15:49:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x1, 0x5, 0x80000001, 0xcccccccc}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:11 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x1, 0x5, 0x80000001, 0xcccccccc}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:11 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:11 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x380, 0x0) [ 1820.743531] misc userio: No port type given on /dev/userio [ 1820.875862] misc userio: No port type given on /dev/userio 15:49:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000000)={0x9, 0x3, 0xff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000000)={0x9, 0x3, 0xff}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) 15:49:12 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000200)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000001c0)={0x1a}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x101400) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="a5223968db5d0d4483107e196a857b7a76db483fde1b4458b0a278a3c5387296f2c3f82bc64fc791aa6259f4420c71f433c64fd89a0b7fe4671ecd96ff", 0x3d, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x4, 0x9, 0x8, 0x1], 0x4, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x4, 0x9, 0x8, 0x1], 0x4, 0x80000, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000002c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000002c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000100)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000100)={r2}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001340)={&(0x7f0000001300)=[0x4, 0x4, 0x2, 0x8, 0x10001], 0x5, 0x1800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r6, 0xc0106403, &(0x7f0000001380)={0x80000000, 0x9, 0x652, 0x1}) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) setsockopt$inet6_dccp_buf(r5, 0x21, 0xe, &(0x7f0000000300)="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", 0x1000) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000080)=0x8) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x4, 0x0, 0x1}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0x35, 0xff, 0x2, 0x1f}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000100)={0x7, 0xffffff79, 0x0, 0xfffffffd, 0x1, 0x1}) 15:49:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x280000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000140)={0x3, 0x7, 0x2, 0xffffff80}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) 15:49:12 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:12 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) 15:49:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8a8, 0x41) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="a9826ccbf782dd527e132aefab5faa8d0dbb7c482ea16c26385704567cefb83a073058425e656d09cba65d288f40d455036a9f18b14655fb0cf94b93488908312671f15f4035f1", 0x47}) [ 1821.757842] misc userio: No port type given on /dev/userio 15:49:12 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x628140, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000000c0)={0x4, &(0x7f0000000040)="5211b031"}) 15:49:12 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) 15:49:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x280000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000140)={0x3, 0x7, 0x2, 0xffffff80}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x280000, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000140)={0x3, 0x7, 0x2, 0xffffff80}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async) [ 1821.798879] misc userio: No port type given on /dev/userio 15:49:12 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:13 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8a8, 0x41) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="a9826ccbf782dd527e132aefab5faa8d0dbb7c482ea16c26385704567cefb83a073058425e656d09cba65d288f40d455036a9f18b14655fb0cf94b93488908312671f15f4035f1", 0x47}) [ 1821.938677] misc userio: No port type given on /dev/userio [ 1821.987330] misc userio: No port type given on /dev/userio 15:49:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000000)={0x9, 0x3, 0xff}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:14 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x628140, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000000c0)={0x4, &(0x7f0000000040)="5211b031"}) 15:49:14 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) 15:49:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x280000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000140)={0x3, 0x7, 0x2, 0xffffff80}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x280000, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000140)={0x3, 0x7, 0x2, 0xffffff80}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async) 15:49:14 executing program 4: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8a8, 0x41) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="a9826ccbf782dd527e132aefab5faa8d0dbb7c482ea16c26385704567cefb83a073058425e656d09cba65d288f40d455036a9f18b14655fb0cf94b93488908312671f15f4035f1", 0x47}) 15:49:14 executing program 4: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x204901) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x9, 0x5, 0x4, 0x0, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0xb0000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x9a391b24c0c8288f, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000100)=0x2) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000000c0)={0x0, 0xe}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x120080, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000001c0)={0x3, 0x3, {}, {0xee00}, 0xfffffffffffffffb, 0x7}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x5, 0x80, {}, {r4}}) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000200)) 15:49:14 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x628140, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000000c0)={0x4, &(0x7f0000000040)="5211b031"}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x628140, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000000c0)={0x4, &(0x7f0000000040)="5211b031"}) (async) 15:49:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x12000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000140)={r2, &(0x7f0000000100)=""/61}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000080)={r3, 0x2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) [ 1823.316628] misc userio: No port type given on /dev/userio 15:49:14 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 15:49:14 executing program 4: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x1f}, 0x2) [ 1823.518392] misc userio: No port type given on /dev/userio 15:49:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x204901) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x9, 0x5, 0x4, 0x0, 0x6}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0xb0000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x9a391b24c0c8288f, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000100)=0x2) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000000c0)={0x0, 0xe}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x120080, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000001c0)={0x3, 0x3, {}, {0xee00}, 0xfffffffffffffffb, 0x7}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x5, 0x80, {}, {r4}}) (async) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000200)) 15:49:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x12000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000140)={r2, &(0x7f0000000100)=""/61}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000080)={r3, 0x2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:15 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:15 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000140)={0x11}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x8, 0x1, 0xc3ac, 0xe6, 0x5, 0x5, 0x1, 0x7fffffff, 0xf3, 0x13f14f0f], 0xa, 0x80000}) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000000c0)={0xa4a1}) syz_open_dev$dri(&(0x7f0000000240), 0x9a7f, 0x4900) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000100)={r3}) 15:49:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000140)={0x11}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x8, 0x1, 0xc3ac, 0xe6, 0x5, 0x5, 0x1, 0x7fffffff, 0xf3, 0x13f14f0f], 0xa, 0x80000}) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000000c0)={0xa4a1}) syz_open_dev$dri(&(0x7f0000000240), 0x9a7f, 0x4900) (async) syz_open_dev$dri(&(0x7f0000000240), 0x9a7f, 0x4900) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000100)={r3}) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000100)={r3}) 15:49:15 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x204901) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x9, 0x5, 0x4, 0x0, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0xb0000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x9a391b24c0c8288f, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000100)=0x2) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000000c0)={0x0, 0xe}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x120080, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000001c0)={0x3, 0x3, {}, {0xee00}, 0xfffffffffffffffb, 0x7}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x5, 0x80, {}, {r4}}) (async) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000200)) 15:49:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x12000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000140)={r2, &(0x7f0000000100)=""/61}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000080)={r3, 0x2}) (async) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000080)={r3, 0x2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:15 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1f}, 0x2) [ 1824.467955] misc userio: No port type given on /dev/userio 15:49:15 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0x610200) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x100000001, 0x800) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f00000000c0)={0xffff, 0x5, 0x3f, 0xb0b0b0b0}) 15:49:16 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000140)={0x11}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x8, 0x1, 0xc3ac, 0xe6, 0x5, 0x5, 0x1, 0x7fffffff, 0xf3, 0x13f14f0f], 0xa, 0x80000}) (async) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000000c0)={0xa4a1}) syz_open_dev$dri(&(0x7f0000000240), 0x9a7f, 0x4900) (async, rerun: 64) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) (rerun: 32) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000100)={r3}) 15:49:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x101], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000100)=r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000140)=r2) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:16 executing program 4: openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x101], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000100)=r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000140)=r2) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x101], 0x1, 0x80000}) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000100)=r1) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000140)=r2) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) 15:49:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0x610200) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x100000001, 0x800) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f00000000c0)={0xffff, 0x5, 0x3f, 0xb0b0b0b0}) syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0x610200) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x100000001, 0x800) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f00000000c0)={0xffff, 0x5, 0x3f, 0xb0b0b0b0}) (async) 15:49:16 executing program 4: openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:16 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:16 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x8001], 0x1, 0xc0800, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000800)={0x0, 0x5, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000}, {}], 0x8, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000940)={r1, &(0x7f0000000880), &(0x7f00000008c0)}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000140)={0x0, 0x79}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x2000003a, 0x7, 0x9, 0x9, 0x9f, 0x100, 0x0, 0x4, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil}) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x101], 0x1, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x101], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000100)=r1) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000100)=r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000140)=r2) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0x610200) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x100000001, 0x800) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f00000000c0)={0xffff, 0x5, 0x3f, 0xb0b0b0b0}) syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0x610200) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x100000001, 0x800) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f00000000c0)={0xffff, 0x5, 0x3f, 0xb0b0b0b0}) (async) 15:49:17 executing program 0: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:17 executing program 4: openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:17 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x8001], 0x1, 0xc0800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x8001], 0x1, 0xc0800, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000800)={0x0, 0x5, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000}, {}], 0x8, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000940)={r1, &(0x7f0000000880), &(0x7f00000008c0)}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000140)={0x0, 0x79}) (async) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000140)={0x0, 0x79}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x2000003a, 0x7, 0x9, 0x9, 0x9f, 0x100, 0x0, 0x4, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil}) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x20040) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0xa, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 15:49:17 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) 15:49:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x20040) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0xa, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x20040) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0xa, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) (async) 15:49:17 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x8001], 0x1, 0xc0800, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000800)={0x0, 0x5, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000680)=[{}, {}], 0x8, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000800)={0x0, 0x5, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000}, {}], 0x8, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000940)={r1, &(0x7f0000000880), &(0x7f00000008c0)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000940)={r1, &(0x7f0000000880), &(0x7f00000008c0)}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000140)={0x0, 0x79}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x2000003a, 0x7, 0x9, 0x9, 0x9f, 0x100, 0x0, 0x4, 0x3], 0x9, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x2000003a, 0x7, 0x9, 0x9, 0x9f, 0x100, 0x0, 0x4, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil}) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x7a7, 0x5, 0x3f, 0x65656565}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:17 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x1f}, 0x2) [ 1826.721377] misc userio: No port type given on /dev/userio [ 1826.805346] misc userio: Invalid payload size 15:49:17 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) [ 1826.904407] misc userio: No port type given on /dev/userio [ 1826.955433] misc userio: Invalid payload size 15:49:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x401, 0x80, 0x1, 0xfffffff7, 0x2, [0x20, 0x9, 0x4, 0x7], [0x0, 0xbd4b, 0xfffffffc, 0x6], [0xffffffff, 0x7, 0x200001, 0x5], [0x1, 0x7, 0x100000000, 0x7fff]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x62100) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000240)=""/114) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000001c0)=""/75) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f00000002c0)={&(0x7f0000ffb000/0x3000)=nil}) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000140)={0xa2, 0x2, 0x4, 0x100, 0x12, 0x4}) 15:49:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x7a7, 0x5, 0x3f, 0x65656565}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x7a7, 0x5, 0x3f, 0x65656565}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) (async) 15:49:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x20040) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0xa, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 15:49:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x68100) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:18 executing program 0: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:18 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) 15:49:18 executing program 0: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x68100) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:18 executing program 1: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x8000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:18 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) [ 1827.856488] misc userio: Invalid payload size 15:49:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x7a7, 0x5, 0x3f, 0x65656565}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:19 executing program 0: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x1f}, 0x2) [ 1828.000608] misc userio: No port type given on /dev/userio 15:49:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x401, 0x80, 0x1, 0xfffffff7, 0x2, [0x20, 0x9, 0x4, 0x7], [0x0, 0xbd4b, 0xfffffffc, 0x6], [0xffffffff, 0x7, 0x200001, 0x5], [0x1, 0x7, 0x100000000, 0x7fff]}) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x62100) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000240)=""/114) (async) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000001c0)=""/75) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f00000002c0)={&(0x7f0000ffb000/0x3000)=nil}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000140)={0xa2, 0x2, 0x4, 0x100, 0x12, 0x4}) 15:49:19 executing program 1: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x8000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x68100) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x400000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:19 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) 15:49:19 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x38100) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) [ 1828.950335] misc userio: Invalid payload size 15:49:20 executing program 1: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x8000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x8000) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) 15:49:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x400000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:20 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) 15:49:20 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x38100) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) [ 1829.137962] misc userio: Invalid payload size 15:49:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x401, 0x80, 0x1, 0xfffffff7, 0x2, [0x20, 0x9, 0x4, 0x7], [0x0, 0xbd4b, 0xfffffffc, 0x6], [0xffffffff, 0x7, 0x200001, 0x5], [0x1, 0x7, 0x100000000, 0x7fff]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x62100) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000240)=""/114) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000001c0)=""/75) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f00000002c0)={&(0x7f0000ffb000/0x3000)=nil}) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000140)={0xa2, 0x2, 0x4, 0x100, 0x12, 0x4}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x401, 0x80, 0x1, 0xfffffff7, 0x2, [0x20, 0x9, 0x4, 0x7], [0x0, 0xbd4b, 0xfffffffc, 0x6], [0xffffffff, 0x7, 0x200001, 0x5], [0x1, 0x7, 0x100000000, 0x7fff]}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x62100) (async) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000240)=""/114) (async) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000001c0)=""/75) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f00000002c0)={&(0x7f0000ffb000/0x3000)=nil}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000140)={0xa2, 0x2, 0x4, 0x100, 0x12, 0x4}) (async) 15:49:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x400000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:21 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x14}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x391040, 0x0) getresuid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f00000000c0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000140)={0x1, 0x1, {}, {r2}, 0x80, 0x41400000000000}) 15:49:21 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) 15:49:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x38100) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x14}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x391040, 0x0) (async) getresuid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f00000000c0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000140)={0x1, 0x1, {}, {r2}, 0x80, 0x41400000000000}) 15:49:21 executing program 0: openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x7a3a82, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000080)={0x3f, 0x1c21, 0x10001, 0xcccccccc}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f00000000c0)) 15:49:21 executing program 4: write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) [ 1830.085629] misc userio: Invalid payload size 15:49:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffffe, 0x80080) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:21 executing program 0: openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000000)={r3}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040)={0x0, 0x1}) 15:49:22 executing program 4: write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) 15:49:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x7a3a82, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000080)={0x3f, 0x1c21, 0x10001, 0xcccccccc}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f00000000c0)) 15:49:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x14}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x391040, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x391040, 0x0) getresuid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f00000000c0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000140)={0x1, 0x1, {}, {r2}, 0x80, 0x41400000000000}) 15:49:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffffe, 0x80080) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffffe, 0x80080) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) 15:49:22 executing program 0: openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1f}, 0x2) 15:49:22 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) 15:49:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x7a3a82, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000080)={0x3f, 0x1c21, 0x10001, 0xcccccccc}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x7a3a82, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000080)={0x3f, 0x1c21, 0x10001, 0xcccccccc}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f00000000c0)) (async) 15:49:22 executing program 1: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:22 executing program 4: write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) 15:49:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffffe, 0x80080) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) [ 1831.323283] misc userio: Invalid payload size 15:49:22 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) [ 1831.471755] misc userio: Invalid payload size 15:49:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f00000001c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000000)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040)={0x0, 0x1}) 15:49:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x10000) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000140)) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f0000000040)={0x7, 0x5, 0x9, 0xc9c, 0x10, 0x9}) 15:49:23 executing program 1: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:23 executing program 4: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) 15:49:23 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x420000, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000001c0)={0xfffffff7, 0xef9f, 0x8000, 0xf, &(0x7f0000000040)=""/15, 0xb6, &(0x7f0000000080)=""/182, 0x29, &(0x7f0000000140)=""/41}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:23 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) 15:49:23 executing program 1: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:23 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async, rerun: 32) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x420000, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000001c0)={0xfffffff7, 0xef9f, 0x8000, 0xf, &(0x7f0000000040)=""/15, 0xb6, &(0x7f0000000080)=""/182, 0x29, &(0x7f0000000140)=""/41}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:23 executing program 4: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) [ 1832.384442] misc userio: Invalid payload size 15:49:23 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x10000) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000140)) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f0000000040)={0x7, 0x5, 0x9, 0xc9c, 0x10, 0x9}) 15:49:23 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) 15:49:23 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x100000001, 0x403) [ 1832.585692] misc userio: No port type given on /dev/userio 15:49:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000000)={r3}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040)={0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)=',', 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f00000001c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000000)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040)={0x0, 0x1}) (async) 15:49:24 executing program 4: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x101002, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) 15:49:24 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x1f}, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x380, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)=0x7fff) 15:49:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r3 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x10000) (rerun: 64) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000140)) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f0000000040)={0x7, 0x5, 0x9, 0xc9c, 0x10, 0x9}) 15:49:24 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x420000, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000001c0)={0xfffffff7, 0xef9f, 0x8000, 0xf, &(0x7f0000000040)=""/15, 0xb6, &(0x7f0000000080)=""/182, 0x29, &(0x7f0000000140)=""/41}) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:24 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x100000001, 0x403) 15:49:24 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) 15:49:24 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x100000001, 0x403) 15:49:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000040)=0x80) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) [ 1833.532986] misc userio: No port type given on /dev/userio 15:49:24 executing program 2: ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffff9, 0x121a42) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x4}) 15:49:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0x3, 0xfff, 0x1, 0x7f, 0x4, 0x4, 0x30d, 0x81, 0x0, 0x0, 0x16b}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:24 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) 15:49:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x23a00) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:26 executing program 2: ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000080)) (async) syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffff9, 0x121a42) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x4}) 15:49:26 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000080)={r1, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000000c0)={0x12}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x400c2) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000340)={0x1ecb, 0x5e01, 0x3ff, 0x32, &(0x7f0000000140)=""/50, 0x53, &(0x7f00000001c0)=""/83, 0xcb, &(0x7f0000000240)=""/203}) ioctl$DRM_IOCTL_GET_CAP(r2, 0x4020940d, &(0x7f0000000000)={0x6}) 15:49:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0x3, 0xfff, 0x1, 0x7f, 0x4, 0x4, 0x30d, 0x81, 0x0, 0x0, 0x16b}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:26 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) 15:49:26 executing program 4: openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) 15:49:26 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) (rerun: 64) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000080)={r1, 0x1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000000c0)={0x12}) (async) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x400c2) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000340)={0x1ecb, 0x5e01, 0x3ff, 0x32, &(0x7f0000000140)=""/50, 0x53, &(0x7f00000001c0)=""/83, 0xcb, &(0x7f0000000240)=""/203}) (async) ioctl$DRM_IOCTL_GET_CAP(r2, 0x4020940d, &(0x7f0000000000)={0x6}) 15:49:26 executing program 2: ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffff9, 0x121a42) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x4}) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000080)) (async) syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffff9, 0x121a42) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x4}) (async) 15:49:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x8, 0x279e, 0x0, 0xffffff12, 0xff, 0x100, 0xfffffff8, 0x7], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f00000000c0)={0x3, 0x5, 0x2, 0x0, 0x6, 0x4, 0x53d4}) 15:49:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0x3, 0xfff, 0x1, 0x7f, 0x4, 0x4, 0x30d, 0x81, 0x0, 0x0, 0x16b}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:26 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000080)={r1, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000000c0)={0x12}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x400c2) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000340)={0x1ecb, 0x5e01, 0x3ff, 0x32, &(0x7f0000000140)=""/50, 0x53, &(0x7f00000001c0)=""/83, 0xcb, &(0x7f0000000240)=""/203}) ioctl$DRM_IOCTL_GET_CAP(r2, 0x4020940d, &(0x7f0000000000)={0x6}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000080)={r1, 0x1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000000c0)={0x12}) (async) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x400c2) (async) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000340)={0x1ecb, 0x5e01, 0x3ff, 0x32, &(0x7f0000000140)=""/50, 0x53, &(0x7f00000001c0)=""/83, 0xcb, &(0x7f0000000240)=""/203}) (async) ioctl$DRM_IOCTL_GET_CAP(r2, 0x4020940d, &(0x7f0000000000)={0x6}) (async) 15:49:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000280)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r4}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x3, 0x9}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000040)=0x4) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x23a00) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (rerun: 64) 15:49:27 executing program 4: openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) 15:49:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0x3, 0xfff, 0x1, 0x7f, 0x4, 0x4, 0x30d, 0x81, 0x0, 0x0, 0x16b}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:27 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(0xffffffffffffffff, 0x4008af7c, &(0x7f0000000040)={0x3, 0x1}) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x14}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="61b89d88e82baae476e0e87426c2022ff6770c2983d858241767dac364cad2ab859944933a0f056712495b47603d851c671f91431b52df51ab798411bc3d963a46fd7e70d464973ba6361514bc34203bedb9cac46ee274e49efafab21c720be109193466e59d364fdfa42255a5ef", 0x6e}) 15:49:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000280)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r4}) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x3, 0x9}) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) (async) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000040)=0x4) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000280)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r4}) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x3, 0x9}) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) (async) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000040)=0x4) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) 15:49:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:27 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$VHOST_VDPA_SET_GROUP_ASID(0xffffffffffffffff, 0x4008af7c, &(0x7f0000000040)={0x3, 0x1}) (async) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x14}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="61b89d88e82baae476e0e87426c2022ff6770c2983d858241767dac364cad2ab859944933a0f056712495b47603d851c671f91431b52df51ab798411bc3d963a46fd7e70d464973ba6361514bc34203bedb9cac46ee274e49efafab21c720be109193466e59d364fdfa42255a5ef", 0x6e}) 15:49:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0x3, 0xfff, 0x1, 0x7f, 0x4, 0x4, 0x30d, 0x81, 0x0, 0x0, 0x16b}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:28 executing program 4: openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) 15:49:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x23a00) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:28 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$VHOST_VDPA_SET_GROUP_ASID(0xffffffffffffffff, 0x4008af7c, &(0x7f0000000040)={0x3, 0x1}) (async) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x14}) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="61b89d88e82baae476e0e87426c2022ff6770c2983d858241767dac364cad2ab859944933a0f056712495b47603d851c671f91431b52df51ab798411bc3d963a46fd7e70d464973ba6361514bc34203bedb9cac46ee274e49efafab21c720be109193466e59d364fdfa42255a5ef", 0x6e}) 15:49:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:49:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0x3, 0x200, 0x1}) 15:49:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x3}, 0x2) 15:49:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0x3, 0x200, 0x1}) (async) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0x3, 0x200, 0x1}) 15:49:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x400008000, 0x800) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x0, 0x803, 0x0, 0x3f49, 0x400, 0x0, 0x9}) 15:49:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:49:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0x3, 0xfff, 0x1, 0x7f, 0x4, 0x4, 0x30d, 0x81, 0x0, 0x0, 0x16b}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0x3, 0x200, 0x1}) 15:49:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x400008000, 0x800) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x0, 0x803, 0x0, 0x3f49, 0x400, 0x0, 0x9}) syz_open_dev$dri(&(0x7f0000000040), 0x400008000, 0x800) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x0, 0x803, 0x0, 0x3f49, 0x400, 0x0, 0x9}) (async) 15:49:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:49:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x248280, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000040)={0x8, 0x400}) ioctl$BLKROSET(r1, 0x125d, &(0x7f00000000c0)=0x8) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000001c0)={0x3, 0x9, 0x0, [{0x5, 0x800, 0x0, 0x8, 0x8, 0x1, 0x1, '\x00', 0x1}, {0x7fffffffffffffff, 0x4, 0x5d, 0x5, 0x0, 0x9, 0x0, '\x00', 0x4}, {0x100000000, 0x1ff, 0x658cc079, 0x9, 0x0, 0x8, 0x9, '\x00', 0x8}, {0x2, 0x8, 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x5d}, {0x2, 0x7, 0x8000000000000001, 0x5, 0x8, 0x7f, 0x4, '\x00', 0x2}, {0x7, 0x4, 0xfffffffffffffffb, 0x41, 0xc6, 0x40, 0x0, '\x00', 0xfffffffffffffc00}, {0x7cd, 0x5, 0xffffffffffffff62, 0x93, 0x7b, 0x7, 0x85, '\x00', 0x6}, {0x100, 0xd92, 0x5, 0x20, 0x3, 0x6, 0x3, '\x00', 0x4}, {0xfffffffffffff800, 0x400000, 0x9, 0x1, 0x8, 0x0, 0x9, '\x00', 0x6}]}) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000140)={0x8}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0x3, 0xfff, 0x1, 0x7f, 0x4, 0x4, 0x30d, 0x81, 0x0, 0x0, 0x16b}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x20000000, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f00000000c0)={0x1, 0x3, 0xf5c7}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x6}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000040)=0x4) 15:49:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x400008000, 0x800) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x0, 0x803, 0x0, 0x3f49, 0x400, 0x0, 0x9}) 15:49:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:49:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x248280, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000040)={0x8, 0x400}) (async, rerun: 32) ioctl$BLKROSET(r1, 0x125d, &(0x7f00000000c0)=0x8) (async, rerun: 32) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000001c0)={0x3, 0x9, 0x0, [{0x5, 0x800, 0x0, 0x8, 0x8, 0x1, 0x1, '\x00', 0x1}, {0x7fffffffffffffff, 0x4, 0x5d, 0x5, 0x0, 0x9, 0x0, '\x00', 0x4}, {0x100000000, 0x1ff, 0x658cc079, 0x9, 0x0, 0x8, 0x9, '\x00', 0x8}, {0x2, 0x8, 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x5d}, {0x2, 0x7, 0x8000000000000001, 0x5, 0x8, 0x7f, 0x4, '\x00', 0x2}, {0x7, 0x4, 0xfffffffffffffffb, 0x41, 0xc6, 0x40, 0x0, '\x00', 0xfffffffffffffc00}, {0x7cd, 0x5, 0xffffffffffffff62, 0x93, 0x7b, 0x7, 0x85, '\x00', 0x6}, {0x100, 0xd92, 0x5, 0x20, 0x3, 0x6, 0x3, '\x00', 0x4}, {0xfffffffffffff800, 0x400000, 0x9, 0x1, 0x8, 0x0, 0x9, '\x00', 0x6}]}) (async, rerun: 32) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000140)={0x8}) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:49:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x3ff, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={r2, 0x81}) 15:49:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) socket(0x15, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:49:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:32 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x10}) 15:49:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x248280, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000040)={0x8, 0x400}) (async) ioctl$BLKROSET(r1, 0x125d, &(0x7f00000000c0)=0x8) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000001c0)={0x3, 0x9, 0x0, [{0x5, 0x800, 0x0, 0x8, 0x8, 0x1, 0x1, '\x00', 0x1}, {0x7fffffffffffffff, 0x4, 0x5d, 0x5, 0x0, 0x9, 0x0, '\x00', 0x4}, {0x100000000, 0x1ff, 0x658cc079, 0x9, 0x0, 0x8, 0x9, '\x00', 0x8}, {0x2, 0x8, 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x5d}, {0x2, 0x7, 0x8000000000000001, 0x5, 0x8, 0x7f, 0x4, '\x00', 0x2}, {0x7, 0x4, 0xfffffffffffffffb, 0x41, 0xc6, 0x40, 0x0, '\x00', 0xfffffffffffffc00}, {0x7cd, 0x5, 0xffffffffffffff62, 0x93, 0x7b, 0x7, 0x85, '\x00', 0x6}, {0x100, 0xd92, 0x5, 0x20, 0x3, 0x6, 0x3, '\x00', 0x4}, {0xfffffffffffff800, 0x400000, 0x9, 0x1, 0x8, 0x0, 0x9, '\x00', 0x6}]}) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000140)={0x8}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000b00)) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) ioctl$DRM_IOCTL_GET_CAP(r2, 0x4020940d, &(0x7f0000000000)={0x2}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040)={0x1}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r5, 0x8008af73, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r6, 0x8008af73, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r7, 0x8008af73, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r7, 0x4008af13, &(0x7f0000000100)={0x2, 0x7cf8}) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f00000000c0)={0x2, 0x1f, 0x1}) 15:49:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x1}) 15:49:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x6, 0x0, {0x0}, {}, 0x9}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0xb610, 0xfffffffd, {r1}, {0xffffffffffffffff}, 0x9, 0x10001}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)) 15:49:34 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x1}) 15:49:34 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000b00)) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) ioctl$DRM_IOCTL_GET_CAP(r2, 0x4020940d, &(0x7f0000000000)={0x2}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040)={0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040)={0x1}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r5, 0x8008af73, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r5, 0x8008af73, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r6, 0x8008af73, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r7, 0x8008af73, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r7, 0x8008af73, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r7, 0x4008af13, &(0x7f0000000100)={0x2, 0x7cf8}) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f00000000c0)={0x2, 0x1f, 0x1}) 15:49:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:34 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:34 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x1}) 15:49:34 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000b00)) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) ioctl$DRM_IOCTL_GET_CAP(r2, 0x4020940d, &(0x7f0000000000)={0x2}) (async) ioctl$DRM_IOCTL_GET_CAP(r2, 0x4020940d, &(0x7f0000000000)={0x2}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040)={0x1}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r5, 0x8008af73, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r6, 0x8008af73, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r6, 0x8008af73, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r7, 0x8008af73, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r7, 0x4008af13, &(0x7f0000000100)={0x2, 0x7cf8}) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f00000000c0)={0x2, 0x1f, 0x1}) 15:49:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:34 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f00000000c0)=0x1) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x4000008001, 0x400) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) 15:49:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x1}) 15:49:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={r1, &(0x7f00000001c0)=""/243}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000140)={r2, 0x20}) 15:49:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x1}) 15:49:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:35 executing program 4: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)=0x5) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0x471a) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3e, 0x721021) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000080)={0x7953, 0x81, 0x8, 0x2, 0x1b, 0x401}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) 15:49:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x40) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f00000000c0)={0x2, 0x43, 0x7, 0xfff, 0x1328a9e2, 0x9}) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000080)={0x3, 0x9, 0x0, 0x1f}) 15:49:35 executing program 2: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000080)={0x1}) 15:49:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:35 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x10}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x40) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f00000000c0)={0x2, 0x43, 0x7, 0xfff, 0x1328a9e2, 0x9}) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000080)={0x3, 0x9, 0x0, 0x1f}) 15:49:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={r1, &(0x7f00000001c0)=""/243}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000140)={r2, 0x20}) 15:49:36 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:36 executing program 2: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000080)={0x1}) 15:49:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x40) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x40) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f00000000c0)={0x2, 0x43, 0x7, 0xfff, 0x1328a9e2, 0x9}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f00000000c0)={0x2, 0x43, 0x7, 0xfff, 0x1328a9e2, 0x9}) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000080)={0x3, 0x9, 0x0, 0x1f}) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000080)={0x3, 0x9, 0x0, 0x1f}) 15:49:36 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:36 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x10}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:36 executing program 2: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000080)={0x1}) 15:49:36 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1, 0x80000000, 0x9, 0x4], 0x4, 0x800}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x9, 0x40000) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0xffffffff}) 15:49:36 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:36 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x1}) 15:49:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1, 0x80000000, 0x9, 0x4], 0x4, 0x800}) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x9, 0x40000) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0xffffffff}) 15:49:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={r1, &(0x7f00000001c0)=""/243}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={r1, &(0x7f00000001c0)=""/243}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000140)={r2, 0x20}) 15:49:38 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:49:38 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x1}) 15:49:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1, 0x80000000, 0x9, 0x4], 0x4, 0x800}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x9, 0x40000) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0xffffffff}) (async) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0xffffffff}) 15:49:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={r1, &(0x7f00000001c0)=""/243}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000140)={r2, 0x20}) 15:49:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:49:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="86252c77155e8ff6f4028760870307b4f45541955213fec377ad3afd2490fa434f1bd52b55c3d4f6a963866e15d523756e22d2165eccac69efaaac952ac6bacbf40e8b193d84df1e7d1b6766042be4b98c5790b6688689af67672b44769e4e905e6e71dbae8af2aaeebbd2e0a1578c7707e0f39ad8c6b85f8127c692fbb235073f2d39", 0x83}) 15:49:38 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x1}) 15:49:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:49:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:39 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x104, 0x8140) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x30f80, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="1a58f7561c9fc1a141788f14a40530c6197bb41867c250bce5898cd6540e2d6864100670c69c667f8e9226d98f93f97de465164bb9e8000000ae192ae73886fd1eb789cf0a4c1f41dd064de7938cf0a4a475b612f6640000000000000000000000001e6f0a3a4ac1a9c6a3b7f00ddc21f62d8e", 0x73}) 15:49:39 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000080)={0x1}) 15:49:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="86252c77155e8ff6f4028760870307b4f45541955213fec377ad3afd2490fa434f1bd52b55c3d4f6a963866e15d523756e22d2165eccac69efaaac952ac6bacbf40e8b193d84df1e7d1b6766042be4b98c5790b6688689af67672b44769e4e905e6e71dbae8af2aaeebbd2e0a1578c7707e0f39ad8c6b85f8127c692fbb235073f2d39", 0x83}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="86252c77155e8ff6f4028760870307b4f45541955213fec377ad3afd2490fa434f1bd52b55c3d4f6a963866e15d523756e22d2165eccac69efaaac952ac6bacbf40e8b193d84df1e7d1b6766042be4b98c5790b6688689af67672b44769e4e905e6e71dbae8af2aaeebbd2e0a1578c7707e0f39ad8c6b85f8127c692fbb235073f2d39", 0x83}) (async) 15:49:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x0, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:39 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={r1, &(0x7f00000001c0)=""/243}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000140)={r2, 0x20}) 15:49:39 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000080)={0x1}) 15:49:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x0, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:39 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:39 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x104, 0x8140) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x30f80, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="1a58f7561c9fc1a141788f14a40530c6197bb41867c250bce5898cd6540e2d6864100670c69c667f8e9226d98f93f97de465164bb9e8000000ae192ae73886fd1eb789cf0a4c1f41dd064de7938cf0a4a475b612f6640000000000000000000000001e6f0a3a4ac1a9c6a3b7f00ddc21f62d8e", 0x73}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000140), 0x104, 0x8140) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x30f80, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="1a58f7561c9fc1a141788f14a40530c6197bb41867c250bce5898cd6540e2d6864100670c69c667f8e9226d98f93f97de465164bb9e8000000ae192ae73886fd1eb789cf0a4c1f41dd064de7938cf0a4a475b612f6640000000000000000000000001e6f0a3a4ac1a9c6a3b7f00ddc21f62d8e", 0x73}) (async) 15:49:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="86252c77155e8ff6f4028760870307b4f45541955213fec377ad3afd2490fa434f1bd52b55c3d4f6a963866e15d523756e22d2165eccac69efaaac952ac6bacbf40e8b193d84df1e7d1b6766042be4b98c5790b6688689af67672b44769e4e905e6e71dbae8af2aaeebbd2e0a1578c7707e0f39ad8c6b85f8127c692fbb235073f2d39", 0x83}) 15:49:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x0, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:39 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000080)={0x1}) 15:49:39 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:39 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000140), 0x104, 0x8140) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x30f80, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="1a58f7561c9fc1a141788f14a40530c6197bb41867c250bce5898cd6540e2d6864100670c69c667f8e9226d98f93f97de465164bb9e8000000ae192ae73886fd1eb789cf0a4c1f41dd064de7938cf0a4a475b612f6640000000000000000000000001e6f0a3a4ac1a9c6a3b7f00ddc21f62d8e", 0x73}) 15:49:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 15:49:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x0, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={r1, &(0x7f00000001c0)=""/243}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000140)={r2, 0x20}) 15:49:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 15:49:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffff8, 0x16080) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xedd2, 0x40) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x4, 0x101, 0x100}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f00000000c0)=0x40) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000001c0)="d4f98a5be05b6e78d5ce7ace84bc9fa40a9b95019a8a4e9433435d5a9821911935b0965b38239ad0b15a2612f76fd7be630613f96b1ea731411529758fd669a27d087e539286e01725b9135b3e167b5406ed81551e6811b19657f7a7c2dc0fd0a8671a16283409a5ae0eacab5660ac6f62af8f60e4d500507df944638c5858a0babcbfe632fedad37853c4a35c5e8f05f4ce9e857b719188d63ef39c88849afb05b6bbc545", 0xa5}) 15:49:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x0, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffff8, 0x16080) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 15:49:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xedd2, 0x40) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x4, 0x101, 0x100}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f00000000c0)=0x40) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000001c0)="d4f98a5be05b6e78d5ce7ace84bc9fa40a9b95019a8a4e9433435d5a9821911935b0965b38239ad0b15a2612f76fd7be630613f96b1ea731411529758fd669a27d087e539286e01725b9135b3e167b5406ed81551e6811b19657f7a7c2dc0fd0a8671a16283409a5ae0eacab5660ac6f62af8f60e4d500507df944638c5858a0babcbfe632fedad37853c4a35c5e8f05f4ce9e857b719188d63ef39c88849afb05b6bbc545", 0xa5}) 15:49:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:49:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x0, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffff8, 0x16080) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 15:49:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xedd2, 0x40) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x4, 0x101, 0x100}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f00000000c0)=0x40) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000001c0)="d4f98a5be05b6e78d5ce7ace84bc9fa40a9b95019a8a4e9433435d5a9821911935b0965b38239ad0b15a2612f76fd7be630613f96b1ea731411529758fd669a27d087e539286e01725b9135b3e167b5406ed81551e6811b19657f7a7c2dc0fd0a8671a16283409a5ae0eacab5660ac6f62af8f60e4d500507df944638c5858a0babcbfe632fedad37853c4a35c5e8f05f4ce9e857b719188d63ef39c88849afb05b6bbc545", 0xa5}) 15:49:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r4, 0x8008af73, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000240)) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x20c280, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r7, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r7, 0x4008af14, &(0x7f00000025c0)) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, &(0x7f0000000300)) ioctl$DRM_IOCTL_MAP_BUFS(r6, 0xc0186419, &(0x7f0000002580)={0x4, &(0x7f0000000340)=""/208, &(0x7f0000002500)=[{0x6, 0x1000, 0x0, &(0x7f0000000440)=""/4096}, {0xba09, 0x2b, 0x0, &(0x7f0000001440)=""/43}, {0xfff, 0x1000, 0xce83, &(0x7f0000001480)=""/4096}, {0x5, 0x6, 0xffff1c0e, &(0x7f00000024c0)=""/6}]}) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x7], 0x1, 0xc00}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:49:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="00d0214e4840a7b1ff939ab680e814700d140af01763aefb4262efe40188acf06df4", 0x22}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x347081, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r3}) 15:49:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)) 15:49:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xedd2, 0x40) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x4, 0x101, 0x100}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f00000000c0)=0x40) 15:49:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:49:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="00d0214e4840a7b1ff939ab680e814700d140af01763aefb4262efe40188acf06df4", 0x22}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x347081, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r3}) 15:49:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xedd2, 0x40) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x4, 0x101, 0x100}) 15:49:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x0, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r4, 0x8008af73, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000240)) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x20c280, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r7, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r7, 0x4008af14, &(0x7f00000025c0)) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, &(0x7f0000000300)) ioctl$DRM_IOCTL_MAP_BUFS(r6, 0xc0186419, &(0x7f0000002580)={0x4, &(0x7f0000000340)=""/208, &(0x7f0000002500)=[{0x6, 0x1000, 0x0, &(0x7f0000000440)=""/4096}, {0xba09, 0x2b, 0x0, &(0x7f0000001440)=""/43}, {0xfff, 0x1000, 0xce83, &(0x7f0000001480)=""/4096}, {0x5, 0x6, 0xffff1c0e, &(0x7f00000024c0)=""/6}]}) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x7], 0x1, 0xc00}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)) 15:49:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="00d0214e4840a7b1ff939ab680e814700d140af01763aefb4262efe40188acf06df4", 0x22}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x347081, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r3}) 15:49:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000040), 0xedd2, 0x40) 15:49:43 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:43 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x0, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000000c0)="007decd8f3fb4689a4b2a0c2e61e1c50686aab7b678401e359fb30edf7ba0c2cbcdc1c566856e0785a6e6eb826c2773aa442e0a405db354bece9119900b9a4943fc3ff4a09fd7b028cc837c73f21979c3f555186b0d416a60abfe7460b31ca939cd3e8f3a05b7006d793340fbdfde445", 0x70}) 15:49:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)) 15:49:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:43 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x0, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:44 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000100)="0fbf9b5bcfbe44aab1b8a23fa93057e6b86b8373d77063a954b876ce4aaea60dec72288f3eaea32e1088ca76cb57e973dbb154c1163ad353dced308b7ba1110f567f16548ceeeb65d9c81a481bdffc3c8189", 0x52}) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x1f, 0x412a00) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f00000002c0)={0x8, 0xd171, 0x7c, 0xff}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r3}) 15:49:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000000c0)="007decd8f3fb4689a4b2a0c2e61e1c50686aab7b678401e359fb30edf7ba0c2cbcdc1c566856e0785a6e6eb826c2773aa442e0a405db354bece9119900b9a4943fc3ff4a09fd7b028cc837c73f21979c3f555186b0d416a60abfe7460b31ca939cd3e8f3a05b7006d793340fbdfde445", 0x70}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000000c0)="007decd8f3fb4689a4b2a0c2e61e1c50686aab7b678401e359fb30edf7ba0c2cbcdc1c566856e0785a6e6eb826c2773aa442e0a405db354bece9119900b9a4943fc3ff4a09fd7b028cc837c73f21979c3f555186b0d416a60abfe7460b31ca939cd3e8f3a05b7006d793340fbdfde445", 0x70}) (async) 15:49:44 executing program 1: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xedd2, 0x40) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x4, 0x101, 0x100}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f00000000c0)=0x40) 15:49:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 15:49:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x0, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:44 executing program 1: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000000)) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000040)) 15:49:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async, rerun: 32) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, 0x0) (async, rerun: 32) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000000c0)="007decd8f3fb4689a4b2a0c2e61e1c50686aab7b678401e359fb30edf7ba0c2cbcdc1c566856e0785a6e6eb826c2773aa442e0a405db354bece9119900b9a4943fc3ff4a09fd7b028cc837c73f21979c3f555186b0d416a60abfe7460b31ca939cd3e8f3a05b7006d793340fbdfde445", 0x70}) 15:49:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x0, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 15:49:44 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x3}) 15:49:44 executing program 1: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 15:49:44 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)="55d302e77d6714016c273f0079729a839574492fb334aafc6a1ac58d2c7ce819eb6bb74883a0d1ac426f599652b488db561f1726b9a15a48c697731606fba6525136b2ee3186ab365f7cd51b6d63a8890fe292837f88389d2564d45d509154e8116b8d28587d1d5218b14a2e5becbea659cc92c928f954a37f222955b231cfd2be1738406a90e14400c49469f811f244430a2dfc12f810e580d32440362f4bfc16fe099d97a8e127c14cd8b368ab6518e319d44aba20f7", 0xb7}) 15:49:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x0, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x80, 0x10000, 0x1, 0x22, &(0x7f0000000040)=""/34, 0xb0, &(0x7f0000000080)=""/176, 0xea, &(0x7f00000001c0)=""/234}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x3, 0x9, 0x4, 0x0, 0x4}) 15:49:44 executing program 1: r0 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) [ 1854.356055] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.361659] ieee802154 phy1 wpan1: encryption failed: -22 15:49:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x5, 0x1f, 0x2, 0xc1, 0x0, 0x3, 0x80, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xcd, 0x4, @perf_config_ext={0x4daa, 0xe8}, 0x2081, 0x7fff, 0x8, 0x1, 0x9, 0x5, 0x88, 0x0, 0x3ce2, 0x0, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xa2a) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:45 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)="55d302e77d6714016c273f0079729a839574492fb334aafc6a1ac58d2c7ce819eb6bb74883a0d1ac426f599652b488db561f1726b9a15a48c697731606fba6525136b2ee3186ab365f7cd51b6d63a8890fe292837f88389d2564d45d509154e8116b8d28587d1d5218b14a2e5becbea659cc92c928f954a37f222955b231cfd2be1738406a90e14400c49469f811f244430a2dfc12f810e580d32440362f4bfc16fe099d97a8e127c14cd8b368ab6518e319d44aba20f7", 0xb7}) 15:49:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 15:49:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:45 executing program 1: r0 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:49:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:49:45 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)="55d302e77d6714016c273f0079729a839574492fb334aafc6a1ac58d2c7ce819eb6bb74883a0d1ac426f599652b488db561f1726b9a15a48c697731606fba6525136b2ee3186ab365f7cd51b6d63a8890fe292837f88389d2564d45d509154e8116b8d28587d1d5218b14a2e5becbea659cc92c928f954a37f222955b231cfd2be1738406a90e14400c49469f811f244430a2dfc12f810e580d32440362f4bfc16fe099d97a8e127c14cd8b368ab6518e319d44aba20f7", 0xb7}) 15:49:45 executing program 1: r0 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:45 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x105000) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x6, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x589200) ioctl$DRM_IOCTL_GET_CAP(r1, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0xa}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x5, 0x1f, 0x2, 0xc1, 0x0, 0x3, 0x80, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xcd, 0x4, @perf_config_ext={0x4daa, 0xe8}, 0x2081, 0x7fff, 0x8, 0x1, 0x9, 0x5, 0x88, 0x0, 0x3ce2, 0x0, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xa2a) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) 15:49:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x101, 0x262080) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000040)=0x6) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000000c0)={0x9a, &(0x7f00000001c0)="0d76ed615bdce6581a4078797c1c74f3e3ab2bec47862daf6e2e6ce96ba14654c59b10ec3948a725c001282a4365ed277684138cd9e46315afe51fd581426d8db205769e712e9be510cb808bf82abd643f2682e48b3be968262d67a8d429db8b7326d78beb4f92436df7bec981957137de520d17b6217333f6821366148356f56ebc300a58856ec3a6fa25fae538b149be8796657eaad8fd7e4a"}) 15:49:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40200) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f00000000c0)={0x2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)) 15:49:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 15:49:46 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x401, 0x7, {0xffffffffffffffff}, {0xee00}, 0x3, 0x7fffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x5, 0xfb4, {}, {r2}, 0x2}) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f00000000c0)={0x2, 0x3}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x0, 0x1, 0x42}) 15:49:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:46 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x8000) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xe2de, 0x101000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) 15:49:47 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) [ 1855.965660] [drm:drm_calc_timestamping_constants] *ERROR* crtc 29: Can't calculate constants, dotclock = 0! 15:49:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) socket$inet_udplite(0x2, 0x2, 0x88) 15:49:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x101, 0x262080) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000040)=0x6) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000000c0)={0x9a, &(0x7f00000001c0)="0d76ed615bdce6581a4078797c1c74f3e3ab2bec47862daf6e2e6ce96ba14654c59b10ec3948a725c001282a4365ed277684138cd9e46315afe51fd581426d8db205769e712e9be510cb808bf82abd643f2682e48b3be968262d67a8d429db8b7326d78beb4f92436df7bec981957137de520d17b6217333f6821366148356f56ebc300a58856ec3a6fa25fae538b149be8796657eaad8fd7e4a"}) 15:49:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x401, 0x7, {0xffffffffffffffff}, {0xee00}, 0x3, 0x7fffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x5, 0xfb4, {}, {r2}, 0x2}) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f00000000c0)={0x2, 0x3}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x0, 0x1, 0x42}) 15:49:50 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 15:49:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x101, 0x262080) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000040)=0x6) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000000c0)={0x9a, &(0x7f00000001c0)="0d76ed615bdce6581a4078797c1c74f3e3ab2bec47862daf6e2e6ce96ba14654c59b10ec3948a725c001282a4365ed277684138cd9e46315afe51fd581426d8db205769e712e9be510cb808bf82abd643f2682e48b3be968262d67a8d429db8b7326d78beb4f92436df7bec981957137de520d17b6217333f6821366148356f56ebc300a58856ec3a6fa25fae538b149be8796657eaad8fd7e4a"}) 15:49:50 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) socket$inet_udplite(0x2, 0x2, 0x88) 15:49:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 15:49:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x104800) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:50 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 15:49:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x104800) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 15:49:53 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x104800) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:49:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 15:49:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x101, 0x262080) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000040)=0x6) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000000c0)={0x9a, &(0x7f00000001c0)="0d76ed615bdce6581a4078797c1c74f3e3ab2bec47862daf6e2e6ce96ba14654c59b10ec3948a725c001282a4365ed277684138cd9e46315afe51fd581426d8db205769e712e9be510cb808bf82abd643f2682e48b3be968262d67a8d429db8b7326d78beb4f92436df7bec981957137de520d17b6217333f6821366148356f56ebc300a58856ec3a6fa25fae538b149be8796657eaad8fd7e4a"}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x101, 0x262080) (async) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000040)=0x6) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000000c0)={0x9a, &(0x7f00000001c0)="0d76ed615bdce6581a4078797c1c74f3e3ab2bec47862daf6e2e6ce96ba14654c59b10ec3948a725c001282a4365ed277684138cd9e46315afe51fd581426d8db205769e712e9be510cb808bf82abd643f2682e48b3be968262d67a8d429db8b7326d78beb4f92436df7bec981957137de520d17b6217333f6821366148356f56ebc300a58856ec3a6fa25fae538b149be8796657eaad8fd7e4a"}) (async) 15:49:53 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f00000000c0)={'wlan1\x00'}) socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x7}) 15:49:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:49:53 executing program 4: openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x210000) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)='U', 0x20000081}) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000001c0)={0x4}) 15:49:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, 0x0) 15:49:53 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x104800) 15:49:53 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f00000000c0)={'wlan1\x00'}) socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x7}) 15:49:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, 0x0) 15:49:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 15:49:54 executing program 2: syz_open_dev$dri(0x0, 0x1, 0x104800) 15:49:54 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0x3}) 15:49:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0x4020940d, 0x0)