/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000000)) 16:06:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000001300)={0x1000, &(0x7f0000000300)=""/4096}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000280)={0x6, 0xfffffc01, 0x8001, 0x1, 0x8001, 0x0, 0x3}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000180)={0x1, 0x4788, 0x400, 0xaac, 0x1, 0x64}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x0, 0x9}) (async) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000001340)={0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000001380)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f00000013c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000001400)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000001440)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000001480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r5, 0xc02864ca, &(0x7f0000001540)={&(0x7f00000014c0)=[r6, 0x0, 0x0, 0x0, r7, 0x0, 0x0, r8, 0x0, r9], &(0x7f0000001500)=[0x4, 0x2548, 0x3, 0x9, 0x5, 0x655, 0x18], 0x4, 0xa, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)) 16:06:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = getpgid(0x0) syz_open_procfs$namespace(r1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000040)=r1, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r4, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x12c, r4, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8, 0xa8, @random="9a563e78"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xa4, 0xa8, @random="96c06cf68a3145ad53061e2cf3cf317ae3b2f739476ebf399d3a344b8bc4b16e3870c240e256e3601a2197097f88b5365bffeb63b90f5c7b3d5d28c33b2cd1223f44aa6b00c7270b7e501b4ca36ac74f39ac9001f688b6a738ad6bfcebf5c2aa239b60dffb806ca4e98f8d131f3bffc78622404963d2b83be3c3988a9e76ac7f885f90d7b42b7d872d917e08ffd708158c997ad526489dbbeab75b02b92792a1"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x2]}, &(0x7f0000000100)=0x6) (rerun: 32) 16:06:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xa, 0x1000000}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x5a, 0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000140)={r2, r3, 0x3, 0x2, 0x1}) (async) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000200)=""/243) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f0000000000)=0x3f) 16:06:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x8, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x8, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) (async) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000000)) (async) [ 1180.125552] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x10004, 0x9, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000240)) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000100)={0x0, 0xc}) socketpair(0xb, 0x80000, 0xfffffff8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x400, @empty, 0x5}}}, 0x84) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x1, 0x8, 0x8, 0xa, 0x50, 0x12}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffff7}, @call={0x85, 0x0, 0x0, 0xae}, @exit]}, &(0x7f0000000140)='GPL\x00', 0xc, 0x25, &(0x7f0000000180)=""/37, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xb, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='pstate_sample\x00', r2}, 0x10) 16:06:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xa, 0x1000000}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x5a, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000140)={r2, r3, 0x3, 0x2, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000200)=""/243) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f0000000000)=0x3f) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xa, 0x1000000}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x5a, 0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000140)={r2, r3, 0x3, 0x2, 0x1}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000200)=""/243) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f0000000000)=0x3f) (async) [ 1180.177136] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = getpgid(0x0) syz_open_procfs$namespace(r1, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000040)=r1, 0x10) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r4, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x12c, r4, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8, 0xa8, @random="9a563e78"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xa4, 0xa8, @random="96c06cf68a3145ad53061e2cf3cf317ae3b2f739476ebf399d3a344b8bc4b16e3870c240e256e3601a2197097f88b5365bffeb63b90f5c7b3d5d28c33b2cd1223f44aa6b00c7270b7e501b4ca36ac74f39ac9001f688b6a738ad6bfcebf5c2aa239b60dffb806ca4e98f8d131f3bffc78622404963d2b83be3c3988a9e76ac7f885f90d7b42b7d872d917e08ffd708158c997ad526489dbbeab75b02b92792a1"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x2]}, &(0x7f0000000100)=0x6) 16:06:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) r2 = getuid() ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x6}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000000c0)={0x6, 0x8000001, {}, {r2}, 0x3, 0x7}) 16:06:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x40000000000000, 0x389200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000200)={0x10000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={0x0, 0x4}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/xc5000', 0x8501, 0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x6ad1}, &(0x7f0000000380)=0x8) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000500)={0xea, 0x1, 0x8, 0x8, &(0x7f00000004c0)=[{0x1, 0x7, 0x913, 0x400}, {0x6, 0xfffd, 0x4, 0x821}, {0x3, 0x100, 0x7, 0x6}, {0x8, 0x0, 0x4, 0x1000}, {0x2, 0x401, 0x7, 0x47}, {0x3, 0x20, 0x8, 0x2}, {0x1b, 0x4, 0x2, 0x8001}, {0x200, 0x101, 0x1000, 0xca3}]}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000000480)={0xffff8000, 0x1, 0x0, 0x2, &(0x7f0000000440)=[{0x6, 0x2, 0xe4a8, 0x5}, {0x4, 0x8, 0x0, 0x2}]}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000003c0)={r4, 0x100, 0x7, 0x5, 0x8, 0x40}, &(0x7f0000000400)=0x14) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f00000002c0)={&(0x7f0000000280)=[r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r7, 0xc01864b1, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x3, &(0x7f0000000140)=[{0xfff, 0xffff, 0x3f, 0xe901}, {0xf5, 0x8, 0x3, 0x1000}, {0x8, 0x7, 0x8000, 0x401}]}) 16:06:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x10004, 0x9, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000240)) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000100)={0x0, 0xc}) socketpair(0xb, 0x80000, 0xfffffff8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x400, @empty, 0x5}}}, 0x84) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x10004, 0x9, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000100)={0x0, 0xc}) (async) socketpair(0xb, 0x80000, 0xfffffff8, &(0x7f0000000040)) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x400, @empty, 0x5}}}, 0x84) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x1, 0x8, 0x8, 0xa, 0x50, 0x12}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffff7}, @call={0x85, 0x0, 0x0, 0xae}, @exit]}, &(0x7f0000000140)='GPL\x00', 0xc, 0x25, &(0x7f0000000180)=""/37, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xb, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='pstate_sample\x00', r2}, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x1, 0x8, 0x8, 0xa, 0x50, 0x12}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffff7}, @call={0x85, 0x0, 0x0, 0xae}, @exit]}, &(0x7f0000000140)='GPL\x00', 0xc, 0x25, &(0x7f0000000180)=""/37, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xb, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='pstate_sample\x00', r2}, 0x10) (async) 16:06:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x40000000000000, 0x389200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000200)={0x10000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={0x0, 0x4}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/xc5000', 0x8501, 0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x6ad1}, &(0x7f0000000380)=0x8) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000500)={0xea, 0x1, 0x8, 0x8, &(0x7f00000004c0)=[{0x1, 0x7, 0x913, 0x400}, {0x6, 0xfffd, 0x4, 0x821}, {0x3, 0x100, 0x7, 0x6}, {0x8, 0x0, 0x4, 0x1000}, {0x2, 0x401, 0x7, 0x47}, {0x3, 0x20, 0x8, 0x2}, {0x1b, 0x4, 0x2, 0x8001}, {0x200, 0x101, 0x1000, 0xca3}]}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000000480)={0xffff8000, 0x1, 0x0, 0x2, &(0x7f0000000440)=[{0x6, 0x2, 0xe4a8, 0x5}, {0x4, 0x8, 0x0, 0x2}]}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000003c0)={r4, 0x100, 0x7, 0x5, 0x8, 0x40}, &(0x7f0000000400)=0x14) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f00000002c0)={&(0x7f0000000280)=[r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r7, 0xc01864b1, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x3, &(0x7f0000000140)=[{0xfff, 0xffff, 0x3f, 0xe901}, {0xf5, 0x8, 0x3, 0x1000}, {0x8, 0x7, 0x8000, 0x401}]}) syz_open_dev$dri(&(0x7f0000000080), 0x40000000000000, 0x389200) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000200)={0x10000}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={0x0, 0x4}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/xc5000', 0x8501, 0xc) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x6ad1}, &(0x7f0000000380)=0x8) (async) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000500)={0xea, 0x1, 0x8, 0x8, &(0x7f00000004c0)=[{0x1, 0x7, 0x913, 0x400}, {0x6, 0xfffd, 0x4, 0x821}, {0x3, 0x100, 0x7, 0x6}, {0x8, 0x0, 0x4, 0x1000}, {0x2, 0x401, 0x7, 0x47}, {0x3, 0x20, 0x8, 0x2}, {0x1b, 0x4, 0x2, 0x8001}, {0x200, 0x101, 0x1000, 0xca3}]}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000000480)={0xffff8000, 0x1, 0x0, 0x2, &(0x7f0000000440)=[{0x6, 0x2, 0xe4a8, 0x5}, {0x4, 0x8, 0x0, 0x2}]}) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000003c0)={r4, 0x100, 0x7, 0x5, 0x8, 0x40}, &(0x7f0000000400)=0x14) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f00000002c0)={&(0x7f0000000280)=[r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r7, 0xc01864b1, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x3, &(0x7f0000000140)=[{0xfff, 0xffff, 0x3f, 0xe901}, {0xf5, 0x8, 0x3, 0x1000}, {0x8, 0x7, 0x8000, 0x401}]}) (async) 16:06:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) r2 = getuid() ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x6}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000000c0)={0x6, 0x8000001, {}, {r2}, 0x3, 0x7}) 16:06:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x1, 0x8, 0x8, 0xa, 0x50, 0x12}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffff7}, @call={0x85, 0x0, 0x0, 0xae}, @exit]}, &(0x7f0000000140)='GPL\x00', 0xc, 0x25, &(0x7f0000000180)=""/37, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xb, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='pstate_sample\x00', r2}, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x1, 0x8, 0x8, 0xa, 0x50, 0x12}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffff7}, @call={0x85, 0x0, 0x0, 0xae}, @exit]}, &(0x7f0000000140)='GPL\x00', 0xc, 0x25, &(0x7f0000000180)=""/37, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xb, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='pstate_sample\x00', r2}, 0x10) (async) 16:06:12 executing program 4: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={r0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000300)={r0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f00000003c0)={0x0, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000340)={0xc46, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000380)={r4, 0x366}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x6, 0x4, 0x0, 0x1ff}) r7 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:12 executing program 1: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x9, 0x91}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={r0, @in6={{0xa, 0x4e21, 0x1, @empty}}}, &(0x7f0000000240)=0x84) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) [ 1180.260904] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1180.285652] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x10004, 0x9, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000240)) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000100)={0x0, 0xc}) socketpair(0xb, 0x80000, 0xfffffff8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x400, @empty, 0x5}}}, 0x84) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x10004, 0x9, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000100)={0x0, 0xc}) (async) socketpair(0xb, 0x80000, 0xfffffff8, &(0x7f0000000040)) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x400, @empty, 0x5}}}, 0x84) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 32) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async, rerun: 32) r2 = getuid() (rerun: 32) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x6}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000000c0)={0x6, 0x8000001, {}, {r2}, 0x3, 0x7}) 16:06:12 executing program 1: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x9, 0x91}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={r0, @in6={{0xa, 0x4e21, 0x1, @empty}}}, &(0x7f0000000240)=0x84) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x9, 0x91}, &(0x7f0000000040)=0x90) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={r0, @in6={{0xa, 0x4e21, 0x1, @empty}}}, &(0x7f0000000240)=0x84) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) (async) 16:06:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="7f693a734ca89a7e299addba8346cabaed1b982866cbcb053bdf176cab05923a84125b7f28264449fa5298659897f2a817", 0x31, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000001c0)={r2, 0x4d, &(0x7f0000000140)=""/77}) 16:06:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x1, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x220000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x51143) ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f00000001c0)=""/73) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000240)={0x8b11, 0x690d, 0x7, 0xfff, 0x12, 0x4}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r2}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000280)={0x400}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:12 executing program 1: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x9, 0x91}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={r0, @in6={{0xa, 0x4e21, 0x1, @empty}}}, &(0x7f0000000240)=0x84) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x40000000000000, 0x389200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000200)={0x10000}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={0x0, 0x4}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/xc5000', 0x8501, 0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x6ad1}, &(0x7f0000000380)=0x8) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000500)={0xea, 0x1, 0x8, 0x8, &(0x7f00000004c0)=[{0x1, 0x7, 0x913, 0x400}, {0x6, 0xfffd, 0x4, 0x821}, {0x3, 0x100, 0x7, 0x6}, {0x8, 0x0, 0x4, 0x1000}, {0x2, 0x401, 0x7, 0x47}, {0x3, 0x20, 0x8, 0x2}, {0x1b, 0x4, 0x2, 0x8001}, {0x200, 0x101, 0x1000, 0xca3}]}) (async) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000000480)={0xffff8000, 0x1, 0x0, 0x2, &(0x7f0000000440)=[{0x6, 0x2, 0xe4a8, 0x5}, {0x4, 0x8, 0x0, 0x2}]}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000003c0)={r4, 0x100, 0x7, 0x5, 0x8, 0x40}, &(0x7f0000000400)=0x14) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f00000002c0)={&(0x7f0000000280)=[r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r7, 0xc01864b1, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x3, &(0x7f0000000140)=[{0xfff, 0xffff, 0x3f, 0xe901}, {0xf5, 0x8, 0x3, 0x1000}, {0x8, 0x7, 0x8000, 0x401}]}) 16:06:12 executing program 4: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={r0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000300)={r0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f00000003c0)={0x0, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000340)={0xc46, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000380)={r4, 0x366}) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x6, 0x4, 0x0, 0x1ff}) (async) r7 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="7f693a734ca89a7e299addba8346cabaed1b982866cbcb053bdf176cab05923a84125b7f28264449fa5298659897f2a817", 0x31, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000001c0)={r2, 0x4d, &(0x7f0000000140)=""/77}) 16:06:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000400)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000480)={0x4, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000200)={0x2e, &(0x7f00000001c0)="800ed194901beeecf81c0706bde8ce55050e48351b4a78f90225d6cbef950071e25d31274218439bcbdf37a9b0f1"}) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f00000004c0)=0x101) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000140)={0x9, 0x0, 0x10001}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3873, 0x2482) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, '\x00', 0x4, 0x7}) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000000)={0x81, 0x4, 0x0, 0x2, 0x9, 0xe6a5, 0x10000}) 16:06:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="7f693a734ca89a7e299addba8346cabaed1b982866cbcb053bdf176cab05923a84125b7f28264449fa5298659897f2a817", 0x31, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000001c0)={r2, 0x4d, &(0x7f0000000140)=""/77}) 16:06:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x1, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:12 executing program 4: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={r0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000300)={r0}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 32) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f00000003c0)={0x0, 0x5}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000340)={0xc46, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000380)={r4, 0x366}) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x6, 0x4, 0x0, 0x1ff}) r7 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000400)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000480)={0x4, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000200)={0x2e, &(0x7f00000001c0)="800ed194901beeecf81c0706bde8ce55050e48351b4a78f90225d6cbef950071e25d31274218439bcbdf37a9b0f1"}) (async) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f00000004c0)=0x101) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000140)={0x9, 0x0, 0x10001}) (async) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3873, 0x2482) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, '\x00', 0x4, 0x7}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000000)={0x81, 0x4, 0x0, 0x2, 0x9, 0xe6a5, 0x10000}) 16:06:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x220000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x51143) ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f00000001c0)=""/73) (async) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000240)={0x8b11, 0x690d, 0x7, 0xfff, 0x12, 0x4}) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r2}) (async) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000280)={0x400}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:12 executing program 5: ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000100)={'\x00', 0x9, 0x0, 0x6}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x100) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x410000a0}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="0000a3b6ff5c598e889300001f8bc0a811b1829fc218668336de4c42c6dedf601320018ed8487696580f4c5160f11e060012f1c407ab688f4dba690ccf0792e4c312e157bec0963a10cc3caf0424f74f937f00b6a95eb7abe6b87d33de9828f545d66f8a8e18b70a47b5b1f13213175d5901cb90ccaa7839a4a5a3595c6697cf028c756063a515d146541b06eef9bcbb08950d30edf14666cd97bcfbad9daf89e84de41dff42d4b7599ab11bc3c23cbe52a080004800", @ANYRES16=r1, @ANYBLOB="02002bbd7000fedbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000300)={0x0, 0x2, 0x98a1, 0x1, &(0x7f00000002c0)=[{0x1, 0x400, 0x40, 0x5}]}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @empty}}}, 0x84) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xfffffffe, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 16:06:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000000c0)={0x8, 0x7, 0x0, 0x7fff, 0x101, 0x1, 0x3}) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000200)=0xabb4) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)={0x3, 0x8, 0x7, 0x1, 0x1, [0x80, 0x7, 0x7, 0xffff7fff], [0xffffffff, 0x1, 0x7, 0x9], [0x8, 0x3, 0x6, 0x9], [0x9, 0x0, 0x9, 0xfff]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000140)={0x0, 0x2, 0xb9c3, 0x7, &(0x7f0000000100)=[{0x9a2, 0xffff, 0x401, 0x20}, {0x7f, 0x8, 0x3, 0x7}, {0x13d3, 0x1f, 0xdb, 0xa7}, {0x826, 0x40, 0x5, 0x8}, {0x7a, 0xfff8, 0xd4, 0x101}, {0x7, 0x3f, 0x1, 0xfffd}, {0x7fff, 0xef71, 0xb5, 0xf52a}]}) 16:06:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x1, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x1, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 16:06:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000400)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000480)={0x4, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000200)={0x2e, &(0x7f00000001c0)="800ed194901beeecf81c0706bde8ce55050e48351b4a78f90225d6cbef950071e25d31274218439bcbdf37a9b0f1"}) (async) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f00000004c0)=0x101) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000140)={0x9, 0x0, 0x10001}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3873, 0x2482) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, '\x00', 0x4, 0x7}) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000000)={0x81, 0x4, 0x0, 0x2, 0x9, 0xe6a5, 0x10000}) 16:06:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x220000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x51143) (rerun: 64) ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f00000001c0)=""/73) (async) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000240)={0x8b11, 0x690d, 0x7, 0xfff, 0x12, 0x4}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r2}) (async) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000280)={0x400}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000000c0)={0x8, 0x7, 0x0, 0x7fff, 0x101, 0x1, 0x3}) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000200)=0xabb4) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)={0x3, 0x8, 0x7, 0x1, 0x1, [0x80, 0x7, 0x7, 0xffff7fff], [0xffffffff, 0x1, 0x7, 0x9], [0x8, 0x3, 0x6, 0x9], [0x9, 0x0, 0x9, 0xfff]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000140)={0x0, 0x2, 0xb9c3, 0x7, &(0x7f0000000100)=[{0x9a2, 0xffff, 0x401, 0x20}, {0x7f, 0x8, 0x3, 0x7}, {0x13d3, 0x1f, 0xdb, 0xa7}, {0x826, 0x40, 0x5, 0x8}, {0x7a, 0xfff8, 0xd4, 0x101}, {0x7, 0x3f, 0x1, 0xfffd}, {0x7fff, 0xef71, 0xb5, 0xf52a}]}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000000c0)={0x8, 0x7, 0x0, 0x7fff, 0x101, 0x1, 0x3}) (async) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000200)=0xabb4) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)={0x3, 0x8, 0x7, 0x1, 0x1, [0x80, 0x7, 0x7, 0xffff7fff], [0xffffffff, 0x1, 0x7, 0x9], [0x8, 0x3, 0x6, 0x9], [0x9, 0x0, 0x9, 0xfff]}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000140)={0x0, 0x2, 0xb9c3, 0x7, &(0x7f0000000100)=[{0x9a2, 0xffff, 0x401, 0x20}, {0x7f, 0x8, 0x3, 0x7}, {0x13d3, 0x1f, 0xdb, 0xa7}, {0x826, 0x40, 0x5, 0x8}, {0x7a, 0xfff8, 0xd4, 0x101}, {0x7, 0x3f, 0x1, 0xfffd}, {0x7fff, 0xef71, 0xb5, 0xf52a}]}) (async) 16:06:12 executing program 5: ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000100)={'\x00', 0x9, 0x0, 0x6}) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x100) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x410000a0}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="0000a3b6ff5c598e889300001f8bc0a811b1829fc218668336de4c42c6dedf601320018ed8487696580f4c5160f11e060012f1c407ab688f4dba690ccf0792e4c312e157bec0963a10cc3caf0424f74f937f00b6a95eb7abe6b87d33de9828f545d66f8a8e18b70a47b5b1f13213175d5901cb90ccaa7839a4a5a3595c6697cf028c756063a515d146541b06eef9bcbb08950d30edf14666cd97bcfbad9daf89e84de41dff42d4b7599ab11bc3c23cbe52a080004800", @ANYRES16=r1, @ANYBLOB="02002bbd7000fedbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000300)={0x0, 0x2, 0x98a1, 0x1, &(0x7f00000002c0)=[{0x1, 0x400, 0x40, 0x5}]}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @empty}}}, 0x84) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xfffffffe, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 16:06:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000000c0)={0x8, 0x7, 0x0, 0x7fff, 0x101, 0x1, 0x3}) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000200)=0xabb4) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)={0x3, 0x8, 0x7, 0x1, 0x1, [0x80, 0x7, 0x7, 0xffff7fff], [0xffffffff, 0x1, 0x7, 0x9], [0x8, 0x3, 0x6, 0x9], [0x9, 0x0, 0x9, 0xfff]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000140)={0x0, 0x2, 0xb9c3, 0x7, &(0x7f0000000100)=[{0x9a2, 0xffff, 0x401, 0x20}, {0x7f, 0x8, 0x3, 0x7}, {0x13d3, 0x1f, 0xdb, 0xa7}, {0x826, 0x40, 0x5, 0x8}, {0x7a, 0xfff8, 0xd4, 0x101}, {0x7, 0x3f, 0x1, 0xfffd}, {0x7fff, 0xef71, 0xb5, 0xf52a}]}) 16:06:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000100)={0x4}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x1b4c, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000180)={0x0, r2}) 16:06:12 executing program 4: setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x2}, 0x8) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000100)={0x55}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f00000000c0)={r1, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0xf9, 0x0, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000340)={0xed, &(0x7f0000000240)=""/237}) 16:06:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000100)={0x4}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x1b4c, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000180)={0x0, r2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000100)={0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x1b4c, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000180)={0x0, r2}) (async) 16:06:12 executing program 5: ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000100)={'\x00', 0x9, 0x0, 0x6}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x100) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x410000a0}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="0000a3b6ff5c598e889300001f8bc0a811b1829fc218668336de4c42c6dedf601320018ed8487696580f4c5160f11e060012f1c407ab688f4dba690ccf0792e4c312e157bec0963a10cc3caf0424f74f937f00b6a95eb7abe6b87d33de9828f545d66f8a8e18b70a47b5b1f13213175d5901cb90ccaa7839a4a5a3595c6697cf028c756063a515d146541b06eef9bcbb08950d30edf14666cd97bcfbad9daf89e84de41dff42d4b7599ab11bc3c23cbe52a080004800", @ANYRES16=r1, @ANYBLOB="02002bbd7000fedbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000300)={0x0, 0x2, 0x98a1, 0x1, &(0x7f00000002c0)=[{0x1, 0x400, 0x40, 0x5}]}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @empty}}}, 0x84) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xfffffffe, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000100)={'\x00', 0x9, 0x0, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x100) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x410000a0}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="0000a3b6ff5c598e889300001f8bc0a811b1829fc218668336de4c42c6dedf601320018ed8487696580f4c5160f11e060012f1c407ab688f4dba690ccf0792e4c312e157bec0963a10cc3caf0424f74f937f00b6a95eb7abe6b87d33de9828f545d66f8a8e18b70a47b5b1f13213175d5901cb90ccaa7839a4a5a3595c6697cf028c756063a515d146541b06eef9bcbb08950d30edf14666cd97bcfbad9daf89e84de41dff42d4b7599ab11bc3c23cbe52a080004800", @ANYRES16=r1, @ANYBLOB="02002bbd7000fedbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000300)={0x0, 0x2, 0x98a1, 0x1, &(0x7f00000002c0)=[{0x1, 0x400, 0x40, 0x5}]}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @empty}}}, 0x84) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xfffffffe, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 16:06:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x4, 0x7, 0x4, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x76faddc5, 0x200340) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000280)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[{}, {}], 0x800, 0x0, '\x00', 0x4, 0x2}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x4, 0x6, 0x570ca734, 0x73, 0x7, 0x3}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:12 executing program 4: setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x2}, 0x8) (async, rerun: 64) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 64) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000100)={0x55}) (async) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f00000000c0)={r1, 0x1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0xf9, 0x0, 0x8}) (async, rerun: 32) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000340)={0xed, &(0x7f0000000240)=""/237}) 16:06:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x4, 0x7, 0x4, 0x1}) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/bcm5974', 0x201, 0x90) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffe, 0x200400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xfd, 0x3, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x76faddc5, 0x200340) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000280)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[{}, {}], 0x800, 0x0, '\x00', 0x4, 0x2}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x4, 0x6, 0x570ca734, 0x73, 0x7, 0x3}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x76faddc5, 0x200340) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000280)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[{}, {}], 0x800, 0x0, '\x00', 0x4, 0x2}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x4, 0x6, 0x570ca734, 0x73, 0x7, 0x3}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) 16:06:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000001c0)={0x6}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/speedtch', 0x420280, 0x8) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000240)=[0x0, 0x0, 0x0, r2, r3, r4, r4, 0x0], &(0x7f0000000100)=[0x8001, 0xac0f, 0xf31c, 0x2, 0x4000002, 0x9, 0x7, 0x8, 0x1ff], 0x17fc, 0x8, 0x6}) 16:06:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000100)={0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x1b4c, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000180)={0x0, r2}) 16:06:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x4, 0x7, 0x4, 0x1}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:12 executing program 4: setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x2}, 0x8) (async) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) (rerun: 32) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000100)={0x55}) (async, rerun: 32) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f00000000c0)={r1, 0x1}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0xf9, 0x0, 0x8}) (async) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000340)={0xed, &(0x7f0000000240)=""/237}) 16:06:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x76faddc5, 0x200340) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000280)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[{}, {}], 0x800, 0x0, '\x00', 0x4, 0x2}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x4, 0x6, 0x570ca734, 0x73, 0x7, 0x3}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/bcm5974', 0x201, 0x90) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffe, 0x200400) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xfd, 0x3, 0x9, 0x0, 0x0}) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000001c0)={0x6}) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/speedtch', 0x420280, 0x8) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000000)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000240)=[0x0, 0x0, 0x0, r2, r3, r4, r4, 0x0], &(0x7f0000000100)=[0x8001, 0xac0f, 0xf31c, 0x2, 0x4000002, 0x9, 0x7, 0x8, 0x1ff], 0x17fc, 0x8, 0x6}) 16:06:12 executing program 3: ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000000)={0x0, 0x6}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x8, @mcast2, 0xfffffffb}, @in6={0xa, 0x4e24, 0x6, @private1, 0x5}, @in={0x2, 0x4e22, @multicast2}], 0x58) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sas_device', 0x46080, 0x78) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000100)={0xfff, 0x6, 0x0, 0x6, 0x2, [0x7, 0x2, 0x44000000, 0x1], [0x1, 0x5, 0x5, 0xffff0001], [0x1, 0x4, 0x9, 0x7], [0xd8, 0xfffffffffffffff7, 0x6, 0x7f]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x508000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, r2], &(0x7f00000000c0)=[0xfea, 0x8, 0x4, 0xfffffffffffffffa, 0x6, 0xfffffffffffff50a, 0x1b, 0x3, 0x3, 0x0], 0x2, 0x2, 0x3}) 16:06:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/bcm5974', 0x201, 0x90) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffe, 0x200400) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xfd, 0x3, 0x9, 0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000001c0)={0x6}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/speedtch', 0x420280, 0x8) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000240)=[0x0, 0x0, 0x0, r2, r3, r4, r4, 0x0], &(0x7f0000000100)=[0x8001, 0xac0f, 0xf31c, 0x2, 0x4000002, 0x9, 0x7, 0x8, 0x1ff], 0x17fc, 0x8, 0x6}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000001c0)={0x6}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/speedtch', 0x420280, 0x8) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000240)=[0x0, 0x0, 0x0, r2, r3, r4, r4, 0x0], &(0x7f0000000100)=[0x8001, 0xac0f, 0xf31c, 0x2, 0x4000002, 0x9, 0x7, 0x8, 0x1ff], 0x17fc, 0x8, 0x6}) (async) 16:06:13 executing program 3: ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000000)={0x0, 0x6}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000000)={0x0, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) 16:06:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x508000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, r2], &(0x7f00000000c0)=[0xfea, 0x8, 0x4, 0xfffffffffffffffa, 0x6, 0xfffffffffffff50a, 0x1b, 0x3, 0x3, 0x0], 0x2, 0x2, 0x3}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x508000) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, r2], &(0x7f00000000c0)=[0xfea, 0x8, 0x4, 0xfffffffffffffffa, 0x6, 0xfffffffffffff50a, 0x1b, 0x3, 0x3, 0x0], 0x2, 0x2, 0x3}) (async) 16:06:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x8, @mcast2, 0xfffffffb}, @in6={0xa, 0x4e24, 0x6, @private1, 0x5}, @in={0x2, 0x4e22, @multicast2}], 0x58) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sas_device', 0x46080, 0x78) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000100)={0xfff, 0x6, 0x0, 0x6, 0x2, [0x7, 0x2, 0x44000000, 0x1], [0x1, 0x5, 0x5, 0xffff0001], [0x1, 0x4, 0x9, 0x7], [0xd8, 0xfffffffffffffff7, 0x6, 0x7f]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x323000) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000340)={0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, r5], &(0x7f00000002c0)=[0x0, 0x5], 0x2}) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil}) r6 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x5, 0x8, 0xfffffff7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r7, 0x6431) 16:06:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x8, @mcast2, 0xfffffffb}, @in6={0xa, 0x4e24, 0x6, @private1, 0x5}, @in={0x2, 0x4e22, @multicast2}], 0x58) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sas_device', 0x46080, 0x78) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000100)={0xfff, 0x6, 0x0, 0x6, 0x2, [0x7, 0x2, 0x44000000, 0x1], [0x1, 0x5, 0x5, 0xffff0001], [0x1, 0x4, 0x9, 0x7], [0xd8, 0xfffffffffffffff7, 0x6, 0x7f]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x8, @mcast2, 0xfffffffb}, @in6={0xa, 0x4e24, 0x6, @private1, 0x5}, @in={0x2, 0x4e22, @multicast2}], 0x58) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sas_device', 0x46080, 0x78) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000100)={0xfff, 0x6, 0x0, 0x6, 0x2, [0x7, 0x2, 0x44000000, 0x1], [0x1, 0x5, 0x5, 0xffff0001], [0x1, 0x4, 0x9, 0x7], [0xd8, 0xfffffffffffffff7, 0x6, 0x7f]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:13 executing program 3: ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000000)={0x0, 0x6}) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil}) (async, rerun: 64) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (rerun: 64) 16:06:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xfffffffd, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x7, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={r3, 0xfffffffffffffff8}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000040)={0x0, 0x1}) 16:06:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x323000) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000340)={0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, r5], &(0x7f00000002c0)=[0x0, 0x5], 0x2}) (async) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil}) (async) r6 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x5, 0x8, 0xfffffff7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r7, 0x6431) 16:06:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x508000) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, r2], &(0x7f00000000c0)=[0xfea, 0x8, 0x4, 0xfffffffffffffffa, 0x6, 0xfffffffffffff50a, 0x1b, 0x3, 0x3, 0x0], 0x2, 0x2, 0x3}) 16:06:13 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) 16:06:13 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa11d257690194695}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x188, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x81f}, {0xc, 0x90, 0x401}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4df0}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x200}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x80000000}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7f00}, {0xc, 0x90, 0xe01}}]}, 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffffd}) 16:06:13 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/comedi', 0x402, 0x108) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100)=0x5, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x7fffffff}}}, 0x84) 16:06:13 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) 16:06:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xfffffffd, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x7, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={r3, 0xfffffffffffffff8}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000040)={0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xfffffffd, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x7, 0x0, 0x10001}) (async) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={r3, 0xfffffffffffffff8}) (async) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000040)={0x0, 0x1}) (async) 16:06:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x323000) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000340)={0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, r5], &(0x7f00000002c0)=[0x0, 0x5], 0x2}) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil}) r6 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x5, 0x8, 0xfffffff7}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r7, 0x6431) 16:06:13 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/comedi', 0x402, 0x108) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100)=0x5, 0x4) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x7fffffff}}}, 0x84) 16:06:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc0100) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:13 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/comedi', 0x402, 0x108) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100)=0x5, 0x4) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x7fffffff}}}, 0x84) 16:06:13 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa11d257690194695}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x188, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x81f}, {0xc, 0x90, 0x401}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4df0}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x200}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x80000000}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7f00}, {0xc, 0x90, 0xe01}}]}, 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffffd}) 16:06:13 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) 16:06:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xfffffffd, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x7, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={r3, 0xfffffffffffffff8}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000040)={0x0, 0x1}) [ 1180.974887] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc0100) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc0100) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) 16:06:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000180)={&(0x7f00000000c0)=[0x2, 0x1, 0xa3, 0x3, 0x2b5b], 0x5, 0x1f, 0x80, 0x6, 0x8, 0x1f, 0x69, {0x81, 0x9, 0x6, 0x400, 0x7, 0x2, 0x9, 0x20, 0x7, 0x0, 0x6, 0x1, 0xa9a, 0xffffffff, "91ae0dde038f47014ae4ac0103340cdab98a86108dc68a757bedf9844a887a69"}}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x1, 0x3, 0x3, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ptrace(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x1, 0x8000, 0x7, 0x1}) 16:06:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x30100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000180)={&(0x7f00000000c0)=[0x2, 0x1, 0xa3, 0x3, 0x2b5b], 0x5, 0x1f, 0x80, 0x6, 0x8, 0x1f, 0x69, {0x81, 0x9, 0x6, 0x400, 0x7, 0x2, 0x9, 0x20, 0x7, 0x0, 0x6, 0x1, 0xa9a, 0xffffffff, "91ae0dde038f47014ae4ac0103340cdab98a86108dc68a757bedf9844a887a69"}}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x30100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:13 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa11d257690194695}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x188, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x81f}, {0xc, 0x90, 0x401}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4df0}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x200}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x80000000}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7f00}, {0xc, 0x90, 0xe01}}]}, 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffffd}) 16:06:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x1, 0x3, 0x3, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ptrace(0xffffffffffffffff, 0xffffffffffffffff) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000100)) (rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x1, 0x8000, 0x7, 0x1}) 16:06:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000180)={&(0x7f00000000c0)=[0x2, 0x1, 0xa3, 0x3, 0x2b5b], 0x5, 0x1f, 0x80, 0x6, 0x8, 0x1f, 0x69, {0x81, 0x9, 0x6, 0x400, 0x7, 0x2, 0x9, 0x20, 0x7, 0x0, 0x6, 0x1, 0xa9a, 0xffffffff, "91ae0dde038f47014ae4ac0103340cdab98a86108dc68a757bedf9844a887a69"}}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) [ 1181.061757] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc0100) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000180)="217003544d304a839fc9c40efd3a74af1e21ea34cc7749846d8ed533dfeeb1bd8fe6f628af928b6745c443537a4a10ae515867a5a404b56424a7a6e9f61fe04735cd1ec7afeed2b7a9a4cfaa61f870153f6ef189c0eb211b26cda8c37c52bbff934502f49934ce8da5a0a297d2e7d150d8222d9357521aa7e4a99c749943085b6ec1c124dd992c83", 0x88}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000140)={0x1, 0xd03}) 16:06:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x1, 0xebc, 0x1, 0x71, 0x9, 0x1, 0x3ff, 0x0, 0x7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)={r1}) 16:06:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x30100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x1, 0xebc, 0x1, 0x71, 0x9, 0x1, 0x3ff, 0x0, 0x7}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)={r1}) 16:06:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x1, 0x3, 0x3, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async, rerun: 32) ptrace(0xffffffffffffffff, 0xffffffffffffffff) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x1, 0x8000, 0x7, 0x1}) [ 1181.114895] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x101, 0xc8c82) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f00000002c0)={r1}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000180)=""/217) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={0x0, r1, 0x5, 0xae40, 0x9}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000280)=0x1) 16:06:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000100)=[0x20], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000380)={0x7fff, 0x3, 0x10001, 0x9, &(0x7f0000000300)=[{0x6, 0x7, 0xb32, 0x2}, {0x7f, 0xeb9, 0x6}, {0x498, 0x6, 0x0, 0x6}, {0x40, 0x0, 0x6, 0x400}, {0x8, 0x0, 0x6, 0xf3}, {0x8, 0x4, 0x20, 0x115}, {0x8, 0x3f, 0x18ca, 0x7}, {0x2, 0x3, 0x6, 0x7}, {0x5, 0x1, 0x101, 0xeca}]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, '\x00', 0x2, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000180)="217003544d304a839fc9c40efd3a74af1e21ea34cc7749846d8ed533dfeeb1bd8fe6f628af928b6745c443537a4a10ae515867a5a404b56424a7a6e9f61fe04735cd1ec7afeed2b7a9a4cfaa61f870153f6ef189c0eb211b26cda8c37c52bbff934502f49934ce8da5a0a297d2e7d150d8222d9357521aa7e4a99c749943085b6ec1c124dd992c83", 0x88}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000140)={0x1, 0xd03}) 16:06:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x1, 0xebc, 0x1, 0x71, 0x9, 0x1, 0x3ff, 0x0, 0x7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x1, 0xebc, 0x1, 0x71, 0x9, 0x1, 0x3ff, 0x0, 0x7}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)={r1}) (async) 16:06:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x101, 0xc8c82) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f00000002c0)={r1}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000180)=""/217) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={0x0, r1, 0x5, 0xae40, 0x9}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000280)=0x1) syz_open_dev$dri(&(0x7f0000000080), 0x101, 0xc8c82) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f00000002c0)={r1}) (async) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000180)=""/217) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={0x0, r1, 0x5, 0xae40, 0x9}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000280)=0x1) (async) 16:06:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) 16:06:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x3, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0x61e8ac6, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)={0x7, r2}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x386d, 0x8480) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="1c000000590fbae1efb351f97bcc5274bb3ea00e3b37a8490c7db9630913c0c9"], &(0x7f0000000180)=0x24) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x101, 0xc8c82) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f00000002c0)={r1}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000180)=""/217) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={0x0, r1, 0x5, 0xae40, 0x9}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000280)=0x1) syz_open_dev$dri(&(0x7f0000000080), 0x101, 0xc8c82) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f00000002c0)={r1}) (async) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000180)=""/217) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={0x0, r1, 0x5, 0xae40, 0x9}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000280)=0x1) (async) 16:06:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000100)=[0x20], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000380)={0x7fff, 0x3, 0x10001, 0x9, &(0x7f0000000300)=[{0x6, 0x7, 0xb32, 0x2}, {0x7f, 0xeb9, 0x6}, {0x498, 0x6, 0x0, 0x6}, {0x40, 0x0, 0x6, 0x400}, {0x8, 0x0, 0x6, 0xf3}, {0x8, 0x4, 0x20, 0x115}, {0x8, 0x3f, 0x18ca, 0x7}, {0x2, 0x3, 0x6, 0x7}, {0x5, 0x1, 0x101, 0xeca}]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, '\x00', 0x2, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000100)=[0x20], 0x2, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000380)={0x7fff, 0x3, 0x10001, 0x9, &(0x7f0000000300)=[{0x6, 0x7, 0xb32, 0x2}, {0x7f, 0xeb9, 0x6}, {0x498, 0x6, 0x0, 0x6}, {0x40, 0x0, 0x6, 0x400}, {0x8, 0x0, 0x6, 0xf3}, {0x8, 0x4, 0x20, 0x115}, {0x8, 0x3f, 0x18ca, 0x7}, {0x2, 0x3, 0x6, 0x7}, {0x5, 0x1, 0x101, 0xeca}]}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, '\x00', 0x2, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0x8}) 16:06:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x29c, 0x10d002) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000140)={0x2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f00000000c0)={0x0, 0x11}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/dvb_usb_ce6230', 0x2201, 0x40) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000180)={0xc, &(0x7f0000000200)=[{}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000001c0)={r3, 0x1}) 16:06:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000180)="217003544d304a839fc9c40efd3a74af1e21ea34cc7749846d8ed533dfeeb1bd8fe6f628af928b6745c443537a4a10ae515867a5a404b56424a7a6e9f61fe04735cd1ec7afeed2b7a9a4cfaa61f870153f6ef189c0eb211b26cda8c37c52bbff934502f49934ce8da5a0a297d2e7d150d8222d9357521aa7e4a99c749943085b6ec1c124dd992c83", 0x88}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000140)={0x1, 0xd03}) 16:06:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x3, 0x2, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0x61e8ac6, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)={0x7, r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x386d, 0x8480) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="1c000000590fbae1efb351f97bcc5274bb3ea00e3b37a8490c7db9630913c0c9"], &(0x7f0000000180)=0x24) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0x8}) 16:06:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000100)=[0x20], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000380)={0x7fff, 0x3, 0x10001, 0x9, &(0x7f0000000300)=[{0x6, 0x7, 0xb32, 0x2}, {0x7f, 0xeb9, 0x6}, {0x498, 0x6, 0x0, 0x6}, {0x40, 0x0, 0x6, 0x400}, {0x8, 0x0, 0x6, 0xf3}, {0x8, 0x4, 0x20, 0x115}, {0x8, 0x3f, 0x18ca, 0x7}, {0x2, 0x3, 0x6, 0x7}, {0x5, 0x1, 0x101, 0xeca}]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, '\x00', 0x2, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000100)=[0x20], 0x2, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000380)={0x7fff, 0x3, 0x10001, 0x9, &(0x7f0000000300)=[{0x6, 0x7, 0xb32, 0x2}, {0x7f, 0xeb9, 0x6}, {0x498, 0x6, 0x0, 0x6}, {0x40, 0x0, 0x6, 0x400}, {0x8, 0x0, 0x6, 0xf3}, {0x8, 0x4, 0x20, 0x115}, {0x8, 0x3f, 0x18ca, 0x7}, {0x2, 0x3, 0x6, 0x7}, {0x5, 0x1, 0x101, 0xeca}]}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, '\x00', 0x2, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x29c, 0x10d002) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000140)={0x2}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f00000000c0)={0x0, 0x11}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x1}) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/dvb_usb_ce6230', 0x2201, 0x40) (async) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000180)={0xc, &(0x7f0000000200)=[{}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000001c0)={r3, 0x1}) 16:06:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x2000000, 0xffffffe1, 0x0, 0x0, 0x0, 0x52, 0x0, 0xa0, &(0x7f00000000c0)=""/89}) 16:06:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x2000000, 0xffffffe1, 0x0, 0x0, 0x0, 0x52, 0x0, 0xa0, &(0x7f00000000c0)=""/89}) 16:06:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0x8}) 16:06:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x3, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0x61e8ac6, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)={0x7, r2}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x386d, 0x8480) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="1c000000590fbae1efb351f97bcc5274bb3ea00e3b37a8490c7db9630913c0c9"], &(0x7f0000000180)=0x24) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x3, 0x2}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0x61e8ac6, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)={0x7, r2}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x386d, 0x8480) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="1c000000590fbae1efb351f97bcc5274bb3ea00e3b37a8490c7db9630913c0c9"], &(0x7f0000000180)=0x24) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, r2], &(0x7f0000000180)=[0x50a, 0xfa, 0x8be, 0x2, 0x8, 0x9, 0x3, 0x2, 0x5], 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x402280) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f0000000280)={0x8001, 0x40, 0x0, 0x3f, 0xb, 0x2}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x2000000, 0xffffffe1, 0x0, 0x0, 0x0, 0x52, 0x0, 0xa0, &(0x7f00000000c0)=""/89}) 16:06:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x29c, 0x10d002) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000140)={0x2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f00000000c0)={0x0, 0x11}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/dvb_usb_ce6230', 0x2201, 0x40) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000180)={0xc, &(0x7f0000000200)=[{}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000001c0)={r3, 0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x29c, 0x10d002) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000140)={0x2}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f00000000c0)={0x0, 0x11}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x1}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/dvb_usb_ce6230', 0x2201, 0x40) (async) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000180)={0xc, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000001c0)={r3, 0x1}) (async) 16:06:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000100)=0x9) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000000)={0xce1, 0x5, 0x7, 0xa3, &(0x7f0000000300)=""/163, 0x93, &(0x7f00000001c0)=""/147, 0x78, &(0x7f0000000280)=""/120}) 16:06:13 executing program 2: syz_open_dev$dri(&(0x7f00000001c0), 0x86, 0xc2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000100)={r2}) 16:06:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, r2], &(0x7f0000000180)=[0x50a, 0xfa, 0x8be, 0x2, 0x8, 0x9, 0x3, 0x2, 0x5], 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x402280) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f0000000280)={0x8001, 0x40, 0x0, 0x3f, 0xb, 0x2}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, r2], &(0x7f0000000180)=[0x50a, 0xfa, 0x8be, 0x2, 0x8, 0x9, 0x3, 0x2, 0x5], 0x2}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x402280) (async) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f0000000280)={0x8001, 0x40, 0x0, 0x3f, 0xb, 0x2}) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) 16:06:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000001340)={0x2, 0x7, 0x8001, 0x4, 0x9, 0x5, 0x100, 0x7, 0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000001380)={0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000280)={0x2, 0x1000, &(0x7f0000000340)=""/4096}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x158, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4008850}, 0xc041) 16:06:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x200000) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 16:06:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x5773, 0x8000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000100)=0x9) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000000)={0xce1, 0x5, 0x7, 0xa3, &(0x7f0000000300)=""/163, 0x93, &(0x7f00000001c0)=""/147, 0x78, &(0x7f0000000280)=""/120}) 16:06:13 executing program 2: syz_open_dev$dri(&(0x7f00000001c0), 0x86, 0xc2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000100)={r2}) syz_open_dev$dri(&(0x7f00000001c0), 0x86, 0xc2) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000100)={r2}) (async) 16:06:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x200000) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 16:06:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000001340)={0x2, 0x7, 0x8001, 0x4, 0x9, 0x5, 0x100, 0x7, 0x1}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000001380)={0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000280)={0x2, 0x1000, &(0x7f0000000340)=""/4096}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x158, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4008850}, 0xc041) 16:06:13 executing program 2: syz_open_dev$dri(&(0x7f00000001c0), 0x86, 0xc2) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) (rerun: 64) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000100)={r2}) 16:06:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, r2], &(0x7f0000000180)=[0x50a, 0xfa, 0x8be, 0x2, 0x8, 0x9, 0x3, 0x2, 0x5], 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x402280) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f0000000280)={0x8001, 0x40, 0x0, 0x3f, 0xb, 0x2}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, r2], &(0x7f0000000180)=[0x50a, 0xfa, 0x8be, 0x2, 0x8, 0x9, 0x3, 0x2, 0x5], 0x2}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x402280) (async) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f0000000280)={0x8001, 0x40, 0x0, 0x3f, 0xb, 0x2}) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) 16:06:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x5773, 0x8000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x200000) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x200000) (async) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) (async) 16:06:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000001340)={0x2, 0x7, 0x8001, 0x4, 0x9, 0x5, 0x100, 0x7, 0x1}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000001380)={0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000280)={0x2, 0x1000, &(0x7f0000000340)=""/4096}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x158, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4008850}, 0xc041) 16:06:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000100)=0x9) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000000)={0xce1, 0x5, 0x7, 0xa3, &(0x7f0000000300)=""/163, 0x93, &(0x7f00000001c0)=""/147, 0x78, &(0x7f0000000280)=""/120}) 16:06:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x5773, 0x8000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:13 executing program 2: socketpair(0x1e, 0xa, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x3, 0x0, 0x4, 0xc6c5, 0x0, 0x4, 0xfb}, &(0x7f0000000100)=0xd3) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x1000, "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"}, &(0x7f0000001280)=0x1008) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000012c0)={r2, 0x1, 0x5, 0x1f, 0x7ff, 0x8, 0x3, 0x4, {r3, @in={{0x2, 0x4e24, @remote}}, 0x2, 0x82, 0x4, 0x80}}, &(0x7f0000001380)=0xb0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x4101) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000013c0)={r4, 0x80000}, &(0x7f0000001400)=0x8) 16:06:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r4}) 16:06:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xff, 0x4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)={0x1}) 16:06:13 executing program 2: socketpair(0x1e, 0xa, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x3, 0x0, 0x4, 0xc6c5, 0x0, 0x4, 0xfb}, &(0x7f0000000100)=0xd3) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x1000, "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"}, &(0x7f0000001280)=0x1008) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000012c0)={r2, 0x1, 0x5, 0x1f, 0x7ff, 0x8, 0x3, 0x4, {r3, @in={{0x2, 0x4e24, @remote}}, 0x2, 0x82, 0x4, 0x80}}, &(0x7f0000001380)=0xb0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x4101) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000013c0)={r4, 0x80000}, &(0x7f0000001400)=0x8) 16:06:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x40040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x0], 0x1, 0xc0000}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000000)={0x1, 0x5693, 0x0, 0x9, 0x1f, 0x10001, 0x6, 0x92, 0x800}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x1, 0x2, 0x4, 0x0, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000280)) 16:06:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000001c0)={0x6}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0xc8c, 0xae400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000140)="e5e3ac883d7c92e4f88e794e4d2523658d08f017b519724a0b17362a69e31016dbb7ad533c3d32e77c0e38afb64bc42bfd81918cbda6eb604bd148c13835cbb61fc12cbd6ece7da75fc9bb9acef0a46196d9e16da305839ecb9c", 0x5a}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000100)={0x5688a56c, 0x1, 0x8, 0x1, &(0x7f0000000080)=[{0x1f00, 0x8, 0x208, 0xa}]}) 16:06:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r4}) 16:06:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xff, 0x4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x0, 0x8}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)={0x1}) 16:06:13 executing program 2: socketpair(0x1e, 0xa, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x3, 0x0, 0x4, 0xc6c5, 0x0, 0x4, 0xfb}, &(0x7f0000000100)=0xd3) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x1000, "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"}, &(0x7f0000001280)=0x1008) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000012c0)={r2, 0x1, 0x5, 0x1f, 0x7ff, 0x8, 0x3, 0x4, {r3, @in={{0x2, 0x4e24, @remote}}, 0x2, 0x82, 0x4, 0x80}}, &(0x7f0000001380)=0xb0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x4101) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000013c0)={r4, 0x80000}, &(0x7f0000001400)=0x8) 16:06:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x40040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x0], 0x1, 0xc0000}) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000000)={0x1, 0x5693, 0x0, 0x9, 0x1f, 0x10001, 0x6, 0x92, 0x800}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x1, 0x2, 0x4, 0x0, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000280)) 16:06:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x0, 0x8}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)={0x1}) 16:06:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xff, 0x4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000001c0)={0x6}) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0xc8c, 0xae400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) socket$inet_sctp(0x2, 0x5, 0x84) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000140)="e5e3ac883d7c92e4f88e794e4d2523658d08f017b519724a0b17362a69e31016dbb7ad533c3d32e77c0e38afb64bc42bfd81918cbda6eb604bd148c13835cbb61fc12cbd6ece7da75fc9bb9acef0a46196d9e16da305839ecb9c", 0x5a}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000100)={0x5688a56c, 0x1, 0x8, 0x1, &(0x7f0000000080)=[{0x1f00, 0x8, 0x208, 0xa}]}) 16:06:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r4}) 16:06:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000200)=0x67) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f00000000c0)={0x9, 0x6, 0x200, 0x773, 0x1, 0x2}) 16:06:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x40040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x0], 0x1, 0xc0000}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000000)={0x1, 0x5693, 0x0, 0x9, 0x1f, 0x10001, 0x6, 0x92, 0x800}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x1, 0x2, 0x4, 0x0, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000280)) 16:06:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000001c0)={0x6}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0xc8c, 0xae400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000140)="e5e3ac883d7c92e4f88e794e4d2523658d08f017b519724a0b17362a69e31016dbb7ad533c3d32e77c0e38afb64bc42bfd81918cbda6eb604bd148c13835cbb61fc12cbd6ece7da75fc9bb9acef0a46196d9e16da305839ecb9c", 0x5a}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000100)={0x5688a56c, 0x1, 0x8, 0x1, &(0x7f0000000080)=[{0x1f00, 0x8, 0x208, 0xa}]}) 16:06:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000001300)={0x0, 0x80000, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000001400)={0x5, 0x1, 0x1, 0x2, &(0x7f00000013c0)=[{0xde, 0x4, 0x8, 0x2}, {0x401, 0x0, 0x1d, 0x1}]}) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000001380)={0x1, &(0x7f0000001340)=[{}]}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, r2, r3, r6, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x3, 0x6, 0x3, 0xfffffa87], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_UNIQUE(r7, 0xc0106401, &(0x7f00000012c0)={0x1000, &(0x7f00000002c0)=""/4096}) 16:06:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000200)=0x67) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f00000000c0)={0x9, 0x6, 0x200, 0x773, 0x1, 0x2}) 16:06:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000100)={0x1, 0x7, 0x3, 0x5, 0x7, 0x100, 0x9}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:14 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e22, 0x7fff, @private1, 0x8}}}, 0x84) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x101000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r3}) 16:06:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000100)=""/181) 16:06:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000100)={0x1, 0x7, 0x3, 0x5, 0x7, 0x100, 0x9}) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}) (rerun: 64) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000200)=0x67) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f00000000c0)={0x9, 0x6, 0x200, 0x773, 0x1, 0x2}) 16:06:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000001300)={0x0, 0x80000, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000001400)={0x5, 0x1, 0x1, 0x2, &(0x7f00000013c0)=[{0xde, 0x4, 0x8, 0x2}, {0x401, 0x0, 0x1d, 0x1}]}) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000001380)={0x1, &(0x7f0000001340)=[{}]}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, r2, r3, r6, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x3, 0x6, 0x3, 0xfffffa87], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_UNIQUE(r7, 0xc0106401, &(0x7f00000012c0)={0x1000, &(0x7f00000002c0)=""/4096}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000001300)={0x0, 0x80000}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000001400)={0x5, 0x1, 0x1, 0x2, &(0x7f00000013c0)=[{0xde, 0x4, 0x8, 0x2}, {0x401, 0x0, 0x1d, 0x1}]}) (async) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000001380)={0x1, &(0x7f0000001340)=[{}]}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, r2, r3, r6, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), 0x9, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x3, 0x6, 0x3, 0xfffffa87], 0x4, 0x80800}) (async) ioctl$DRM_IOCTL_GET_UNIQUE(r7, 0xc0106401, &(0x7f00000012c0)={0x1000, &(0x7f00000002c0)=""/4096}) (async) 16:06:14 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e22, 0x7fff, @private1, 0x8}}}, 0x84) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x101000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r3}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000100)=0x8) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e22, 0x7fff, @private1, 0x8}}}, 0x84) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x101000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 16:06:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 64) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000000)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000100)={0x1, 0x7, 0x3, 0x5, 0x7, 0x100, 0x9}) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000100)=""/181) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000100)=""/181) (async) 16:06:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fdff0436fe775ff26dbc42cb91ffff", @ANYRESOCT=r1, @ANYRESOCT=r2], 0x60}, 0x1, 0x0, 0x0, 0x48040}, 0x4000000) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000000)=0x849, 0x4) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) r5 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000240)) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f00000000c0)={0x0, 0x7fc0, 0x8, 0xffffffff, 0x29, 0x4, 0xfffffffe, 0x2, 0x1, 0x8, 0x0, 0x3}) 16:06:14 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e22, 0x7fff, @private1, 0x8}}}, 0x84) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x101000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r3}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000100)=0x8) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e22, 0x7fff, @private1, 0x8}}}, 0x84) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x101000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 16:06:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000100)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000001300)={0x0, 0x80000, 0xffffffffffffffff}) (async) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000001400)={0x5, 0x1, 0x1, 0x2, &(0x7f00000013c0)=[{0xde, 0x4, 0x8, 0x2}, {0x401, 0x0, 0x1d, 0x1}]}) (async) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000001380)={0x1, &(0x7f0000001340)=[{}]}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, r2, r3, r6, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), 0x9, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x3, 0x6, 0x3, 0xfffffa87], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_UNIQUE(r7, 0xc0106401, &(0x7f00000012c0)={0x1000, &(0x7f00000002c0)=""/4096}) 16:06:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000100)=""/181) 16:06:14 executing program 1: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) 16:06:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={r1, 0x0, 0x4, 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000140)={r1}) 16:06:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fdff0436fe775ff26dbc42cb91ffff", @ANYRESOCT=r1, @ANYRESOCT=r2], 0x60}, 0x1, 0x0, 0x0, 0x48040}, 0x4000000) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000000)=0x849, 0x4) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) r5 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000240)) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f00000000c0)={0x0, 0x7fc0, 0x8, 0xffffffff, 0x29, 0x4, 0xfffffffe, 0x2, 0x1, 0x8, 0x0, 0x3}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fdff0436fe775ff26dbc42cb91ffff", @ANYRESOCT=r1, @ANYRESOCT=r2], 0x60}, 0x1, 0x0, 0x0, 0x48040}, 0x4000000) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000000)=0x849, 0x4) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f00000000c0)={0x0, 0x7fc0, 0x8, 0xffffffff, 0x29, 0x4, 0xfffffffe, 0x2, 0x1, 0x8, 0x0, 0x3}) (async) 16:06:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x1, 0x8001, 0x9, 0x8, 0x0], 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x7}) 16:06:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x4, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:14 executing program 1: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) 16:06:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000005c0)="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", 0x240}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x1, 0x8001, 0x9, 0x8, 0x0], 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x5}) (async) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x7}) 16:06:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x4, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={r1, 0x0, 0x4, 0x9, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000140)={r1}) 16:06:14 executing program 1: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) 16:06:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fdff0436fe775ff26dbc42cb91ffff", @ANYRESOCT=r1, @ANYRESOCT=r2], 0x60}, 0x1, 0x0, 0x0, 0x48040}, 0x4000000) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000000)=0x849, 0x4) (async) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) r5 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f00000000c0)={0x0, 0x7fc0, 0x8, 0xffffffff, 0x29, 0x4, 0xfffffffe, 0x2, 0x1, 0x8, 0x0, 0x3}) 16:06:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000005c0)="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", 0x240}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:14 executing program 1: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}]}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000140)) 16:06:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x4, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x1, 0x8001, 0x9, 0x8, 0x0], 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x5}) (async) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x7}) 16:06:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={r1, 0x0, 0x4, 0x9, 0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3, 0x6}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000140)={r1}) 16:06:14 executing program 1: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}]}) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000140)) 16:06:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x174, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x46, 0xa8, @random="4529b9f89d6309ed902777bbc458444b0e9a06f1c15791ce1377fea0c8d0fc20990f9d1b0df55a689469229865a13a7956b2414df669e99efa214ba02b65e849a7ff"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x5, 0xa9, @random="d9"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x10001}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xd8, 0xa9, @random="a165b99c2e462931116b1eb92195ba7217fd11c46c81dfcbb97ecaa1305931175fa256211e4093085cbdbd92c9c633048c1dc9f1ec528a556467a54cde3308eaf955236e7af67f945a2a2c6eaaf2a75564b9c65e0a50a765377a54dd0640df34037bea6a1afaf08831c709c19ff5a5efd94c13867b98f4e3d43fa108b937bb888bb8912e64db33e2cd4d3a34416bf72154ed35c11607191ffbd2d673756e129c5a50571b7652c3d01623f2d636975277826468f7a1a1111011bd99402f901f06aa097937c63455a79bd13931f2b53a6309aca762"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}]}, 0x174}, 0x1, 0x0, 0x0, 0xc005}, 0x20000800) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xfc, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x44000}, 0xc4bfdb1d6e80bc8d) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"1f56a07ceb03f9cfa82b415506f77139b259d31cf10efa609ca589976b059e61", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000100)={0x1, 0x9, 0x80000001, 0x4}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0xffffff01, 0x100, 0x7, 0x8, 0x0, 0x5, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x8, 0x81, 0x4, 0x9b2c0000, 0x10000, 0x1ff, 0x76d, 0x1, 0x7], 0x9, 0x40800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000240)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000005c0)="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", 0x240}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x174, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x46, 0xa8, @random="4529b9f89d6309ed902777bbc458444b0e9a06f1c15791ce1377fea0c8d0fc20990f9d1b0df55a689469229865a13a7956b2414df669e99efa214ba02b65e849a7ff"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x5, 0xa9, @random="d9"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x10001}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xd8, 0xa9, @random="a165b99c2e462931116b1eb92195ba7217fd11c46c81dfcbb97ecaa1305931175fa256211e4093085cbdbd92c9c633048c1dc9f1ec528a556467a54cde3308eaf955236e7af67f945a2a2c6eaaf2a75564b9c65e0a50a765377a54dd0640df34037bea6a1afaf08831c709c19ff5a5efd94c13867b98f4e3d43fa108b937bb888bb8912e64db33e2cd4d3a34416bf72154ed35c11607191ffbd2d673756e129c5a50571b7652c3d01623f2d636975277826468f7a1a1111011bd99402f901f06aa097937c63455a79bd13931f2b53a6309aca762"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}]}, 0x174}, 0x1, 0x0, 0x0, 0xc005}, 0x20000800) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xfc, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x44000}, 0xc4bfdb1d6e80bc8d) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:14 executing program 1: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}]}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000140)) 16:06:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x6, 0x1ab0], 0x2, 0x180800, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x5, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x9, 0x1, [0x3ff]}, &(0x7f0000000400)=0xa) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000440)={r4, @in6={{0xa, 0x4e21, 0xb8, @private0, 0x8}}, 0x7f, 0xff}, &(0x7f0000000500)=0x90) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1e, 0x11d022) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000340)=""/4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x174, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x46, 0xa8, @random="4529b9f89d6309ed902777bbc458444b0e9a06f1c15791ce1377fea0c8d0fc20990f9d1b0df55a689469229865a13a7956b2414df669e99efa214ba02b65e849a7ff"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x5, 0xa9, @random="d9"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x10001}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xd8, 0xa9, @random="a165b99c2e462931116b1eb92195ba7217fd11c46c81dfcbb97ecaa1305931175fa256211e4093085cbdbd92c9c633048c1dc9f1ec528a556467a54cde3308eaf955236e7af67f945a2a2c6eaaf2a75564b9c65e0a50a765377a54dd0640df34037bea6a1afaf08831c709c19ff5a5efd94c13867b98f4e3d43fa108b937bb888bb8912e64db33e2cd4d3a34416bf72154ed35c11607191ffbd2d673756e129c5a50571b7652c3d01623f2d636975277826468f7a1a1111011bd99402f901f06aa097937c63455a79bd13931f2b53a6309aca762"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}]}, 0x174}, 0x1, 0x0, 0x0, 0xc005}, 0x20000800) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xfc, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x44000}, 0xc4bfdb1d6e80bc8d) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x174, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x46, 0xa8, @random="4529b9f89d6309ed902777bbc458444b0e9a06f1c15791ce1377fea0c8d0fc20990f9d1b0df55a689469229865a13a7956b2414df669e99efa214ba02b65e849a7ff"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x5, 0xa9, @random="d9"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x10001}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xd8, 0xa9, @random="a165b99c2e462931116b1eb92195ba7217fd11c46c81dfcbb97ecaa1305931175fa256211e4093085cbdbd92c9c633048c1dc9f1ec528a556467a54cde3308eaf955236e7af67f945a2a2c6eaaf2a75564b9c65e0a50a765377a54dd0640df34037bea6a1afaf08831c709c19ff5a5efd94c13867b98f4e3d43fa108b937bb888bb8912e64db33e2cd4d3a34416bf72154ed35c11607191ffbd2d673756e129c5a50571b7652c3d01623f2d636975277826468f7a1a1111011bd99402f901f06aa097937c63455a79bd13931f2b53a6309aca762"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}]}, 0x174}, 0x1, 0x0, 0x0, 0xc005}, 0x20000800) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xfc, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x44000}, 0xc4bfdb1d6e80bc8d) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) [ 1182.139318] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"1f56a07ceb03f9cfa82b415506f77139b259d31cf10efa609ca589976b059e61", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1, r2}) (async) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000100)={0x1, 0x9, 0x80000001, 0x4}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0xffffff01, 0x100, 0x7, 0x8, 0x0, 0x5, 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x8, 0x81, 0x4, 0x9b2c0000, 0x10000, 0x1ff, 0x76d, 0x1, 0x7], 0x9, 0x40800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000240)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000100)={0x3, 0x101, 0x4, 0x4, 0x1451, 0xf2, 0x8ce, 0x30cea32c, 0x7fff}) 16:06:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) 16:06:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x100, 0x8000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r1 = syz_open_dev$dri(&(0x7f0000000380), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x736f0ef7, 0xfffffff8], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000340)={0x9, 0x0, 0xffff, 0x78, &(0x7f00000001c0)=""/120, 0x42, &(0x7f0000000240)=""/66, 0x4b, &(0x7f00000002c0)=""/75}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000100)={0x7fff}) 16:06:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x6, 0x1ab0], 0x2, 0x180800, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x5, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x9, 0x1, [0x3ff]}, &(0x7f0000000400)=0xa) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000440)={r4, @in6={{0xa, 0x4e21, 0xb8, @private0, 0x8}}, 0x7f, 0xff}, &(0x7f0000000500)=0x90) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) (async) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1e, 0x11d022) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000340)=""/4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000100)={0x3, 0x101, 0x4, 0x4, 0x1451, 0xf2, 0x8ce, 0x30cea32c, 0x7fff}) 16:06:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000000)={0x2, 0x8, 0x7ff, 0x9, 0x9, 0x1, 0x20, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, 0x0, r3, 0x0, r4], &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffff, 0x0, 0x4, 0x6, 0xf2], 0x1, 0x6, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) r6 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f00000000c0)={r7}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, r8, 0x2, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xbe99}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0x5}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x48090) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000500)={r7}) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18400000070000000000000000000000d4a35000100000001e630000020000000000000004000000"], &(0x7f0000000380)='GPL\x00', 0x8001, 0x3, &(0x7f00000003c0)=""/3, 0x50249c387fdedf91, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xc, 0x20, 0x40d}, 0x10}, 0x80) ioctl$DRM_IOCTL_AGP_INFO(r5, 0x80386433, &(0x7f0000000140)=""/189) 16:06:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"1f56a07ceb03f9cfa82b415506f77139b259d31cf10efa609ca589976b059e61", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000100)={0x1, 0x9, 0x80000001, 0x4}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0xffffff01, 0x100, 0x7, 0x8, 0x0, 0x5, 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x8, 0x81, 0x4, 0x9b2c0000, 0x10000, 0x1ff, 0x76d, 0x1, 0x7], 0x9, 0x40800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000240)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x100, 0x8000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r1 = syz_open_dev$dri(&(0x7f0000000380), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x736f0ef7, 0xfffffff8], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000340)={0x9, 0x0, 0xffff, 0x78, &(0x7f00000001c0)=""/120, 0x42, &(0x7f0000000240)=""/66, 0x4b, &(0x7f00000002c0)=""/75}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000100)={0x7fff}) 16:06:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) 16:06:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000100)={0x3, 0x101, 0x4, 0x4, 0x1451, 0xf2, 0x8ce, 0x30cea32c, 0x7fff}) 16:06:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x6, 0x1ab0], 0x2, 0x180800, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x5, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x9, 0x1, [0x3ff]}, &(0x7f0000000400)=0xa) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000440)={r4, @in6={{0xa, 0x4e21, 0xb8, @private0, 0x8}}, 0x7f, 0xff}, &(0x7f0000000500)=0x90) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) (async) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1e, 0x11d022) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000340)=""/4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) [ 1182.258212] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000000)={0x2, 0x8, 0x7ff, 0x9, 0x9, 0x1, 0x20, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, 0x0, r3, 0x0, r4], &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffff, 0x0, 0x4, 0x6, 0xf2], 0x1, 0x6, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) r6 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f00000000c0)={r7}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, r8, 0x2, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xbe99}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0x5}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x48090) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000500)={r7}) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18400000070000000000000000000000d4a35000100000001e630000020000000000000004000000"], &(0x7f0000000380)='GPL\x00', 0x8001, 0x3, &(0x7f00000003c0)=""/3, 0x50249c387fdedf91, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xc, 0x20, 0x40d}, 0x10}, 0x80) ioctl$DRM_IOCTL_AGP_INFO(r5, 0x80386433, &(0x7f0000000140)=""/189) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000000)={0x2, 0x8, 0x7ff, 0x9, 0x9, 0x1, 0x20, 0x5, 0x7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, 0x0, r3, 0x0, r4], &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffff, 0x0, 0x4, 0x6, 0xf2], 0x1, 0x6, 0x3}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f00000000c0)={r7}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, r8, 0x2, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xbe99}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0x5}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x48090) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000500)={r7}) (async) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18400000070000000000000000000000d4a35000100000001e630000020000000000000004000000"], &(0x7f0000000380)='GPL\x00', 0x8001, 0x3, &(0x7f00000003c0)=""/3, 0x50249c387fdedf91, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xc, 0x20, 0x40d}, 0x10}, 0x80) (async) ioctl$DRM_IOCTL_AGP_INFO(r5, 0x80386433, &(0x7f0000000140)=""/189) (async) 16:06:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x100, 0x8000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r1 = syz_open_dev$dri(&(0x7f0000000380), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x736f0ef7, 0xfffffff8], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000340)={0x9, 0x0, 0xffff, 0x78, &(0x7f00000001c0)=""/120, 0x42, &(0x7f0000000240)=""/66, 0x4b, &(0x7f00000002c0)=""/75}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000100)={0x7fff}) syz_open_dev$dri(&(0x7f0000000040), 0x100, 0x8000) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) (async) syz_open_dev$dri(&(0x7f0000000380), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x736f0ef7, 0xfffffff8], 0x2}) (async) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000340)={0x9, 0x0, 0xffff, 0x78, &(0x7f00000001c0)=""/120, 0x42, &(0x7f0000000240)=""/66, 0x4b, &(0x7f00000002c0)=""/75}) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000100)={0x7fff}) (async) 16:06:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1000114, 0x220442) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) 16:06:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) 16:06:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x11}) [ 1182.325240] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000000)={0x2, 0x8, 0x7ff, 0x9, 0x9, 0x1, 0x20, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, 0x0, r3, 0x0, r4], &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffff, 0x0, 0x4, 0x6, 0xf2], 0x1, 0x6, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) r6 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f00000000c0)={r7}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, r8, 0x2, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xbe99}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0x5}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x48090) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000500)={r7}) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18400000070000000000000000000000d4a35000100000001e630000020000000000000004000000"], &(0x7f0000000380)='GPL\x00', 0x8001, 0x3, &(0x7f00000003c0)=""/3, 0x50249c387fdedf91, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xc, 0x20, 0x40d}, 0x10}, 0x80) ioctl$DRM_IOCTL_AGP_INFO(r5, 0x80386433, &(0x7f0000000140)=""/189) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000000)={0x2, 0x8, 0x7ff, 0x9, 0x9, 0x1, 0x20, 0x5, 0x7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, 0x0, r3, 0x0, r4], &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffff, 0x0, 0x4, 0x6, 0xf2], 0x1, 0x6, 0x3}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f00000000c0)={r7}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, r8, 0x2, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xbe99}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0x5}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x48090) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000500)={r7}) (async) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18400000070000000000000000000000d4a35000100000001e630000020000000000000004000000"], &(0x7f0000000380)='GPL\x00', 0x8001, 0x3, &(0x7f00000003c0)=""/3, 0x50249c387fdedf91, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xc, 0x20, 0x40d}, 0x10}, 0x80) (async) ioctl$DRM_IOCTL_AGP_INFO(r5, 0x80386433, &(0x7f0000000140)=""/189) (async) 16:06:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1000114, 0x220442) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000080), 0x1000114, 0x220442) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) 16:06:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x4, 0x6, 0x1, 0x4], 0x4, 0x0, 0x2, 0x7, 0x2a56fdde, 0xffffffff, 0x8, {0x2, 0xfff, 0xfffa, 0x234e, 0x3, 0x2, 0x4, 0x6, 0x8, 0x800, 0x8, 0x38e, 0x6, 0x9de, "27b75a8cfd882de06a30875ab0f52bbde1d6c0c2fe1c481798ecd5dc09a16fd1"}}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/pcmcia_core', 0x8a03, 0x22) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f00000002c0)={0xc2, &(0x7f00000001c0)=""/194}) 16:06:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) 16:06:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x11}) 16:06:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x4, 0x6, 0x1, 0x4], 0x4, 0x0, 0x2, 0x7, 0x2a56fdde, 0xffffffff, 0x8, {0x2, 0xfff, 0xfffa, 0x234e, 0x3, 0x2, 0x4, 0x6, 0x8, 0x800, 0x8, 0x38e, 0x6, 0x9de, "27b75a8cfd882de06a30875ab0f52bbde1d6c0c2fe1c481798ecd5dc09a16fd1"}}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async, rerun: 64) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/pcmcia_core', 0x8a03, 0x22) (rerun: 64) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f00000002c0)={0xc2, &(0x7f00000001c0)=""/194}) 16:06:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) (async, rerun: 32) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1000114, 0x220442) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/rfkill', 0x200000, 0x0) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f00000001c0)={0x3, 0x76}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[{}], 0x43, 0x0, '\x00', 0x3, 0x1}) 16:06:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x11}) 16:06:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0x4, 0x0, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000100)={0x8, 0xfffffffc, 0x0, 0x8001, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0xf}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)) 16:06:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) 16:06:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 64) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/rfkill', 0x200000, 0x0) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f00000001c0)={0x3, 0x76}) (async, rerun: 32) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[{}], 0x43, 0x0, '\x00', 0x3, 0x1}) 16:06:14 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ipip', 0x20400, 0x40) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, &(0x7f00000000c0)=""/84}) 16:06:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x4, 0x6, 0x1, 0x4], 0x4, 0x0, 0x2, 0x7, 0x2a56fdde, 0xffffffff, 0x8, {0x2, 0xfff, 0xfffa, 0x234e, 0x3, 0x2, 0x4, 0x6, 0x8, 0x800, 0x8, 0x38e, 0x6, 0x9de, "27b75a8cfd882de06a30875ab0f52bbde1d6c0c2fe1c481798ecd5dc09a16fd1"}}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/pcmcia_core', 0x8a03, 0x22) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f00000002c0)={0xc2, &(0x7f00000001c0)=""/194}) 16:06:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x4d180000, 0x0, 0x4, 0x8}) 16:06:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0x4, 0x0, 0x3}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000100)={0x8, 0xfffffffc, 0x0, 0x8001, 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0xf}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)) 16:06:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) syz_open_dev$dri(&(0x7f0000000100), 0x8, 0x20001) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x5, 0x2, 0xe36c, 0x9, 0x80000000, 0xa695, 0x4, 0x7, 0x20], 0x9, 0x80800}) 16:06:14 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ipip', 0x20400, 0x40) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, &(0x7f00000000c0)=""/84}) 16:06:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0x4, 0x0, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000100)={0x8, 0xfffffffc, 0x0, 0x8001, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0xf}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0x4, 0x0, 0x3}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000100)={0x8, 0xfffffffc, 0x0, 0x8001, 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0xf}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)) (async) 16:06:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x4d180000, 0x0, 0x4, 0x8}) 16:06:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000140)={0x6}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000240)={r2, 0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="050d8000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000001c0)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={r4, 0x8001}, 0x8) 16:06:14 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ipip', 0x20400, 0x40) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, &(0x7f00000000c0)=""/84}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ipip', 0x20400, 0x40) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, &(0x7f00000000c0)=""/84}) (async) 16:06:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 64) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/rfkill', 0x200000, 0x0) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f00000001c0)={0x3, 0x76}) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[{}], 0x43, 0x0, '\x00', 0x3, 0x1}) 16:06:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000140)={0x6}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000240)={r2, 0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="050d8000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000001c0)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={r4, 0x8001}, 0x8) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000140)={0x6}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000240)={r2, 0x2}) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="050d8000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000001c0)=0x18) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={r4, 0x8001}, 0x8) (async) 16:06:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) syz_open_dev$dri(&(0x7f0000000100), 0x8, 0x20001) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x5, 0x2, 0xe36c, 0x9, 0x80000000, 0xa695, 0x4, 0x7, 0x20], 0x9, 0x80800}) 16:06:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x4d180000, 0x0, 0x4, 0x8}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x4d180000, 0x0, 0x4, 0x8}) (async) 16:06:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8001, 0x5, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[r1, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) (async) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000140)={0x6}) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000240)={r2, 0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="050d8000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000001c0)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={r4, 0x8001}, 0x8) 16:06:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8001, 0x5, 0x6}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[r1, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:15 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/eeprom_93cx6', 0x400, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000500)={0x5, 0x8}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x200000) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x7ff, 0x24400) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r4}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000240)="bc459e51be6bb0c97cf42efd60cf35780909b44ef9720b0af03f9cb39e10c81920d6c2bd405b51ad55c9a552ff830effff0000a15f47f903ceb071c7b4479046075772c2f4b9ae8331a347edfd2f5b19ffb8fb96fd311be341289568ebeafb63dcae5cf7cdba6f57d6a3bf01010000f8cb7cc883662469c164aee6d194d16c4c4f9d4a310dc8dce800a91373fa8c1afcf8bcc0ab7442a850dd8843c1077229ba069161a5b76140f0d5214b159fdcddc094aedd64ef2bfd9c15edf68aeb7bd9ad8b000000000000000000100000000000008df33ee0c2b0f8061a147345fd19a06a37726739057dd66d216ac6eafe6ad2d3347dc81e16487764219ac870db53f901e0d7f8d405e01dcb1c2b58f30a5fe8699c97762b107575578093de58cd7194bb6443847a1e09b177b3d9abe9ef944c2e5dc8755230987bfd498fa5b1097c51753e977e979797b5bb9ea4185ef6130a2b07ae7f76840220d5269c1817489101bb1effbecbcafe0fdf43a053ba7457ae24e407d5ef7b3cc3babf6bb31d22b6af840d284d55dc66a15dab41d76e136e5a03ed36d9ad455296a80047c16e8579c75d904b5ad11776467cafd546dcbe6596fece88", 0x1b3}) r6 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r6, 0xc0106401, &(0x7f0000000100)={0xbc, &(0x7f0000000400)=""/188}) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, r1], &(0x7f00000000c0)=[0x8000000000000000, 0x2, 0x2, 0xff80000000000000, 0x5, 0x0, 0x100000001, 0x1], 0x2, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000140)={0xaf, &(0x7f0000000200)="02b0fd6f86402ea69b882dfd962079ea472deb778e641d9956790f90381613f0f78402c2f5eb9316466cdfd5c97c76fabc113c626e98635c26d121ddfa51ca91b8471667766e06b936ad14dbd4fa4d3cd417039371a1dfcbfdaaf9c4a5c86ba8f51a278ba62ce8923ad55b8ab5102f6186e05da73a8b26db3a76315ed45e3d5d76bd6f1f4e0d5d678566e75b834c05dfd8fad0a6ff339c49d6072d7c411d7fb4cf25e73b2e5866fbc3d521d4aaa753"}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x6}) 16:06:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x101000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/most', 0x10400, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000200)={0x0, 0x1, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000240)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000300)={&(0x7f0000000280)=[r4, 0x0, 0x0, 0x0, r5, 0x0, r6], &(0x7f00000002c0)=[0xfffffffffffffffd, 0xc7, 0x0, 0x4, 0x200, 0x8001, 0x1], 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000180)={0x84, 0x7, 0x82800004, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r8}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000000)={0x1}) 16:06:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) syz_open_dev$dri(&(0x7f0000000100), 0x8, 0x20001) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x5, 0x2, 0xe36c, 0x9, 0x80000000, 0xa695, 0x4, 0x7, 0x20], 0x9, 0x80800}) 16:06:15 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) getsockname$netlink(r0, &(0x7f0000000200), &(0x7f0000000240)=0xc) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, r1], &(0x7f00000000c0)=[0x8000000000000000, 0x2, 0x2, 0xff80000000000000, 0x5, 0x0, 0x100000001, 0x1], 0x2, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000140)={0xaf, &(0x7f0000000200)="02b0fd6f86402ea69b882dfd962079ea472deb778e641d9956790f90381613f0f78402c2f5eb9316466cdfd5c97c76fabc113c626e98635c26d121ddfa51ca91b8471667766e06b936ad14dbd4fa4d3cd417039371a1dfcbfdaaf9c4a5c86ba8f51a278ba62ce8923ad55b8ab5102f6186e05da73a8b26db3a76315ed45e3d5d76bd6f1f4e0d5d678566e75b834c05dfd8fad0a6ff339c49d6072d7c411d7fb4cf25e73b2e5866fbc3d521d4aaa753"}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x6}) 16:06:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x101000) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/most', 0x10400, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000200)={0x0, 0x1, r3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000240)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000300)={&(0x7f0000000280)=[r4, 0x0, 0x0, 0x0, r5, 0x0, r6], &(0x7f00000002c0)=[0xfffffffffffffffd, 0xc7, 0x0, 0x4, 0x200, 0x8001, 0x1], 0x7}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000180)={0x84, 0x7, 0x82800004, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r8}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000000)={0x1}) 16:06:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8001, 0x5, 0x6}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[r1, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:15 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x1) (async) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/eeprom_93cx6', 0x400, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000500)={0x5, 0x8}) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000040)) (async) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x200000) (async) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x7ff, 0x24400) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r4}) (async) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000240)="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", 0x1b3}) r6 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r6, 0xc0106401, &(0x7f0000000100)={0xbc, &(0x7f0000000400)=""/188}) (async) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)) 16:06:15 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) getsockname$netlink(r0, &(0x7f0000000200), &(0x7f0000000240)=0xc) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) (async) getsockname$netlink(r0, &(0x7f0000000200), &(0x7f0000000240)=0xc) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000000) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 16:06:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, r1], &(0x7f00000000c0)=[0x8000000000000000, 0x2, 0x2, 0xff80000000000000, 0x5, 0x0, 0x100000001, 0x1], 0x2, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000140)={0xaf, &(0x7f0000000200)="02b0fd6f86402ea69b882dfd962079ea472deb778e641d9956790f90381613f0f78402c2f5eb9316466cdfd5c97c76fabc113c626e98635c26d121ddfa51ca91b8471667766e06b936ad14dbd4fa4d3cd417039371a1dfcbfdaaf9c4a5c86ba8f51a278ba62ce8923ad55b8ab5102f6186e05da73a8b26db3a76315ed45e3d5d76bd6f1f4e0d5d678566e75b834c05dfd8fad0a6ff339c49d6072d7c411d7fb4cf25e73b2e5866fbc3d521d4aaa753"}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x6}) 16:06:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) syz_open_dev$dri(&(0x7f0000000180), 0x7fffffffffffffff, 0x3b1401) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000280)={0xfffffff7, 0x0, 0x1, 0x9, &(0x7f0000000200)=[{0x40, 0xb9b3, 0x2, 0x4}, {0x7, 0x7ff, 0xfffe, 0x2}, {0x7, 0x8, 0x3f, 0x401}, {0x3ff, 0x8, 0x0, 0xf8e}, {0x7, 0x2000, 0x6, 0x200}, {0x200, 0x81, 0x5, 0x5}, {0x7d, 0xc6fa, 0x186, 0xff}, {0x9, 0x6, 0xffff, 0x1}, {0x96, 0x3, 0x9, 0x5}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000001c0)) 16:06:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x101000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/most', 0x10400, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000200)={0x0, 0x1, r3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000240)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000300)={&(0x7f0000000280)=[r4, 0x0, 0x0, 0x0, r5, 0x0, r6], &(0x7f00000002c0)=[0xfffffffffffffffd, 0xc7, 0x0, 0x4, 0x200, 0x8001, 0x1], 0x7}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000180)={0x84, 0x7, 0x82800004, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r8}) (async) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000000)={0x1}) 16:06:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)) 16:06:15 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/eeprom_93cx6', 0x400, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000500)={0x5, 0x8}) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x200000) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x7ff, 0x24400) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r4}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000240)="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", 0x1b3}) (async) r6 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_UNIQUE(r6, 0xc0106401, &(0x7f0000000100)={0xbc, &(0x7f0000000400)=""/188}) (async) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)) 16:06:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x7ff, 0x4, 0x4d, 0x4]}, &(0x7f0000000100)=0xc) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:15 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) getsockname$netlink(r0, &(0x7f0000000200), &(0x7f0000000240)=0xc) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) (async) getsockname$netlink(r0, &(0x7f0000000200), &(0x7f0000000240)=0xc) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000000) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 16:06:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000140)={r2}) (async) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x100) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000180), 0x7fffffffffffffff, 0x3b1401) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f00000002c0)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000280)={0xfffffff7, 0x0, 0x1, 0x9, &(0x7f0000000200)=[{0x40, 0xb9b3, 0x2, 0x4}, {0x7, 0x7ff, 0xfffe, 0x2}, {0x7, 0x8, 0x3f, 0x401}, {0x3ff, 0x8, 0x0, 0xf8e}, {0x7, 0x2000, 0x6, 0x200}, {0x200, 0x81, 0x5, 0x5}, {0x7d, 0xc6fa, 0x186, 0xff}, {0x9, 0x6, 0xffff, 0x1}, {0x96, 0x3, 0x9, 0x5}]}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000001c0)) 16:06:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)) (rerun: 64) 16:06:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)) (async) 16:06:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f00000000c0)=[0x1, 0x100], 0x6, 0x2, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x7ff, 0x4, 0x4d, 0x4]}, &(0x7f0000000100)=0xc) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0}) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x100) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000180), 0x7fffffffffffffff, 0x3b1401) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000280)={0xfffffff7, 0x0, 0x1, 0x9, &(0x7f0000000200)=[{0x40, 0xb9b3, 0x2, 0x4}, {0x7, 0x7ff, 0xfffe, 0x2}, {0x7, 0x8, 0x3f, 0x401}, {0x3ff, 0x8, 0x0, 0xf8e}, {0x7, 0x2000, 0x6, 0x200}, {0x200, 0x81, 0x5, 0x5}, {0x7d, 0xc6fa, 0x186, 0xff}, {0x9, 0x6, 0xffff, 0x1}, {0x96, 0x3, 0x9, 0x5}]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000001c0)) 16:06:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x7ff, 0x4, 0x4d, 0x4]}, &(0x7f0000000100)=0xc) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x7ff, 0x4, 0x4d, 0x4]}, &(0x7f0000000100)=0xc) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f00000000c0)=[0x1, 0x100], 0x6, 0x2, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)) 16:06:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f00000000c0)=[0x1, 0x100], 0x6, 0x2, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xc0000000000000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x5a87, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x3, 0x7], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)={r3}) 16:06:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000200), 0xfffffffffffffff8, 0x214000) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000240)=0x9) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/nbd7', 0x100, 0x80) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[{}, {}], 0x1, 0x0, '\x00', 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x2, 0xffff8000, 0x6aa7}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000280)) 16:06:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x80) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:15 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) 16:06:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000200), 0xfffffffffffffff8, 0x214000) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000240)=0x9) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/nbd7', 0x100, 0x80) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[{}, {}], 0x1, 0x0, '\x00', 0x1, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x2, 0xffff8000, 0x6aa7}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000280)) 16:06:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x200880) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000000c0)) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000100)=0x59) 16:06:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x90080) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={0x0, 0x5e}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x408281) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000100)) 16:06:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xc0000000000000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x0) (rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x5a87, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x3, 0x7], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)={r3}) 16:06:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={r3}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000140)={0x100000000, 0x3}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000200)={0x9, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) 16:06:15 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) 16:06:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000200), 0xfffffffffffffff8, 0x214000) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000240)=0x9) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/nbd7', 0x100, 0x80) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[{}, {}], 0x1, 0x0, '\x00', 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x2, 0xffff8000, 0x6aa7}) (async, rerun: 64) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000280)) (rerun: 64) 16:06:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={r3}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000140)={0x100000000, 0x3}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000200)={0x9, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={r3}) (async) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000140)={0x100000000, 0x3}) (async) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000200)={0x9, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) 16:06:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x200880) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 32) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000100)=0x59) 16:06:15 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) 16:06:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x90080) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={0x0, 0x5e}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x408281) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000100)) syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x90080) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={0x0, 0x5e}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x408281) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000100)) (async) 16:06:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xc0000000000000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x5a87, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x3, 0x7], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)={r3}) 16:06:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={r3}) (async, rerun: 32) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000140)={0x100000000, 0x3}) (async, rerun: 32) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000200)={0x9, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) 16:06:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x200880) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000100)=0x59) 16:06:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000000)={0x0, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) 16:06:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x220840) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000000)={0x1b, 0x8000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x5d, &(0x7f00000000c0)=""/93}) 16:06:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000000)=0x7) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000000)={0x0, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) 16:06:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x90080) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={0x0, 0x5e}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x408281) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000100)) syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x90080) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={0x0, 0x5e}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x408281) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000100)) (async) 16:06:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000000)=0x7) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x220840) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000000)={0x1b, 0x8000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x5d, &(0x7f00000000c0)=""/93}) 16:06:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0xf1], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x8, 0x422001) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/libiscsi', 0x202482, 0x10) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000280)={0x3, 0x2}) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000200)={0x2, 0x8000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x3, 0x8, 0x9], 0x3, 0x80800}) 16:06:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f00000001c0)={0xeb7, 0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0], &(0x7f0000000140)=[0xad, 0x6, 0x5], 0x0, 0x8}) 16:06:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x280000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000200)={&(0x7f0000000180)=[r2, 0x0], &(0x7f00000001c0)=[0x3], 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x3, 0x3ad6, 0x4, 0x3, 0x5, 0x6}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) 16:06:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000000)=0x7) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x220840) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000000)={0x1b, 0x8000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x5d, &(0x7f00000000c0)=""/93}) 16:06:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000000)={0x0, 0x7}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) 16:06:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0xf1], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x8, 0x422001) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/libiscsi', 0x202482, 0x10) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000280)={0x3, 0x2}) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000200)={0x2, 0x8000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x3, 0x8, 0x9], 0x3, 0x80800}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0xf1], 0x1, 0x80000}) (async) syz_open_dev$dri(&(0x7f00000001c0), 0x8, 0x422001) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/libiscsi', 0x202482, 0x10) (async) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000280)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000200)={0x2, 0x8000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x3, 0x8, 0x9], 0x3, 0x80800}) (async) 16:06:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f00000001c0)={0xeb7, 0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0], &(0x7f0000000140)=[0xad, 0x6, 0x5], 0x0, 0x8}) 16:06:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x280000) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000200)={&(0x7f0000000180)=[r2, 0x0], &(0x7f00000001c0)=[0x3], 0x2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x3, 0x3ad6, 0x4, 0x3, 0x5, 0x6}) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) 16:06:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f00000001c0)={0xeb7, 0x0, 0x0, 0x9}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0], &(0x7f0000000140)=[0xad, 0x6, 0x5], 0x0, 0x8}) 16:06:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x8, 0x257, 0xffffff81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x3, 0x3, 0x101, 0x9, 0x2, 0x2}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/lcd', 0x100, 0x42) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], 0x5, 0x3, 0x4, 0x0, 0x8}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000380)={0x0, 0x3}) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f00000004c0)={0x4, 0x401, 0xcf, 0x2a, &(0x7f00000003c0)=""/42, 0x2c, &(0x7f0000000400)=""/44, 0x47, &(0x7f0000000440)=""/71}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x100000001, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000140)={0x0, r5}) 16:06:15 executing program 4: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0xf1], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x8, 0x422001) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/libiscsi', 0x202482, 0x10) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000280)={0x3, 0x2}) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000200)={0x2, 0x8000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x3, 0x8, 0x9], 0x3, 0x80800}) 16:06:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/rndis_wlan', 0x418780, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000140)={r3, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:15 executing program 4: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x8, 0x257, 0xffffff81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x3, 0x3, 0x101, 0x9, 0x2, 0x2}) (async, rerun: 32) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/lcd', 0x100, 0x42) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], 0x5, 0x3, 0x4, 0x0, 0x8}) (async, rerun: 32) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 32) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000380)={0x0, 0x3}) (async) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f00000004c0)={0x4, 0x401, 0xcf, 0x2a, &(0x7f00000003c0)=""/42, 0x2c, &(0x7f0000000400)=""/44, 0x47, &(0x7f0000000440)=""/71}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x100000001, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000140)={0x0, r5}) 16:06:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x280000) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000200)={&(0x7f0000000180)=[r2, 0x0], &(0x7f00000001c0)=[0x3], 0x2}) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 32) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x3, 0x3ad6, 0x4, 0x3, 0x5, 0x6}) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) 16:06:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/rndis_wlan', 0x418780, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000140)={r3, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/rndis_wlan', 0x418780, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000140)={r3, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:15 executing program 4: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000180)={0x100000000}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1000, 0x80000) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000140)={r3}) 16:06:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x8, 0x257, 0xffffff81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x3, 0x3, 0x101, 0x9, 0x2, 0x2}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/lcd', 0x100, 0x42) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], 0x5, 0x3, 0x4, 0x0, 0x8}) (async) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000380)={0x0, 0x3}) (async) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f00000004c0)={0x4, 0x401, 0xcf, 0x2a, &(0x7f00000003c0)=""/42, 0x2c, &(0x7f0000000400)=""/44, 0x47, &(0x7f0000000440)=""/71}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x100000001, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000140)={0x0, r5}) 16:06:15 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, &(0x7f00000000c0)=""/105}) 16:06:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/rndis_wlan', 0x418780, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000140)={r3, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000180)={0x100000000}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1000, 0x80000) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000140)={r3}) 16:06:15 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xdb0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x9}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000000c0)={0x0, 0x7, 0x40, 0x2, 0x2, [0xfac3, 0x1, 0x7, 0x9], [0x4, 0x7, 0x6, 0xfffff801], [0x9, 0xcc90, 0xfff, 0x9], [0x890, 0x9, 0x1, 0x2]}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x800, 0x0, 0x0, 0x0, 0x8}) 16:06:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x7e3ba1) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x95, 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:15 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, &(0x7f00000000c0)=""/105}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, &(0x7f00000000c0)=""/105}) (async) 16:06:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x7ff, 0x100) r3 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000140)={0x4, 0x3, {0xffffffffffffffff}, {r3}, 0xffffffffffffffff, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000180)={0x100000000}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1000, 0x80000) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000140)={r3}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000180)={0x100000000}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1000, 0x80000) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000140)={r3}) (async) 16:06:15 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xdb0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x9}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000000c0)={0x0, 0x7, 0x40, 0x2, 0x2, [0xfac3, 0x1, 0x7, 0x9], [0x4, 0x7, 0x6, 0xfffff801], [0x9, 0xcc90, 0xfff, 0x9], [0x890, 0x9, 0x1, 0x2]}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x800, 0x0, 0x0, 0x0, 0x8}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0xdb0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x9}) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000000c0)={0x0, 0x7, 0x40, 0x2, 0x2, [0xfac3, 0x1, 0x7, 0x9], [0x4, 0x7, 0x6, 0xfffff801], [0x9, 0xcc90, 0xfff, 0x9], [0x890, 0x9, 0x1, 0x2]}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x800, 0x0, 0x0, 0x0, 0x8}) (async) 16:06:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x95, 0x7, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x7e3ba1) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x7ff, 0x100) r3 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000140)={0x4, 0x3, {0xffffffffffffffff}, {r3}, 0xffffffffffffffff, 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:15 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, &(0x7f00000000c0)=""/105}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, &(0x7f00000000c0)=""/105}) (async) 16:06:15 executing program 3: ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000180)={0x10}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x80000000, 0x0, 0x3, 0x2, 0x1, [0x6, 0xde3, 0x0, 0x2], [0x10000, 0x7fffffff, 0xfffffeff, 0xf2], [0x6, 0x1, 0x0, 0x10001], [0x8, 0x0, 0x80000000, 0x7]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:15 executing program 3: ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000180)={0x10}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x80000000, 0x0, 0x3, 0x2, 0x1, [0x6, 0xde3, 0x0, 0x2], [0x10000, 0x7fffffff, 0xfffffeff, 0xf2], [0x6, 0x1, 0x0, 0x10001], [0x8, 0x0, 0x80000000, 0x7]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000180)={0x10}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x80000000, 0x0, 0x3, 0x2, 0x1, [0x6, 0xde3, 0x0, 0x2], [0x10000, 0x7fffffff, 0xfffffeff, 0xf2], [0x6, 0x1, 0x0, 0x10001], [0x8, 0x0, 0x80000000, 0x7]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) 16:06:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x95, 0x7, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:15 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xdb0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x9}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000000c0)={0x0, 0x7, 0x40, 0x2, 0x2, [0xfac3, 0x1, 0x7, 0x9], [0x4, 0x7, 0x6, 0xfffff801], [0x9, 0xcc90, 0xfff, 0x9], [0x890, 0x9, 0x1, 0x2]}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x800, 0x0, 0x0, 0x0, 0x8}) 16:06:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x7ff, 0x100) r3 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000140)={0x4, 0x3, {0xffffffffffffffff}, {r3}, 0xffffffffffffffff, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x7ff, 0x100) (async) getuid() (async) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000140)={0x4, 0x3, {0xffffffffffffffff}, {r3}, 0xffffffffffffffff, 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x7e3ba1) (async) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) 16:06:16 executing program 3: ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000180)={0x10}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x80000000, 0x0, 0x3, 0x2, 0x1, [0x6, 0xde3, 0x0, 0x2], [0x10000, 0x7fffffff, 0xfffffeff, 0xf2], [0x6, 0x1, 0x0, 0x10001], [0x8, 0x0, 0x80000000, 0x7]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x7, 0x0, 0x1}) 16:06:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) (async) 16:06:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:16 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000200)=@netrom={'nr', 0x0}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000000)) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000002c0)={r2, 0x1}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f00000001c0)={0x1000, 0x1, 0x6a81, 0x6, &(0x7f0000000180)=[{0x2, 0x1, 0x1, 0x2}, {0xc5, 0x0, 0x400, 0x800}, {0xfffa, 0x3f, 0x1ff, 0x300}, {0x7, 0x4, 0x1, 0x9}, {0x40, 0xfffe, 0x40, 0x4}, {0x5, 0x1, 0x100, 0x9839}]}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x400) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000480)={&(0x7f0000000400)=[r5, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x2, 0xfff, 0x4, 0xffff], 0x3, 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000000300)=""/139) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000280)={0x8, 0x2, 0xa, 0x5, 0x1}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000140)={0x0, 0x1}) 16:06:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/raid0', 0x84000, 0x20) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x6, 0x9, 0x80000000, 0x101, 0x100, 0x2, 0x6, 0x1516, 0x2}) 16:06:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) 16:06:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x7, 0x0, 0x1}) 16:06:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x2, 0x7fff, 0x8, 0x5, 0x2, 0x3], 0x6, 0x401, 0x8, 0x5, 0x0, 0x2, 0x5, {0xd3, 0x9bf, 0x1, 0xb3d, 0x43eb, 0x1ff, 0x9, 0x7, 0x401, 0xda, 0x1, 0x200, 0xbe, 0x5, "4f6c384873b07c73cc085abde4406df54e41d4650d421ed49f83e6fe44aa4259"}}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f00000000c0)={0x0, 0x6}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/aoe', 0x408200, 0x1ad) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x7, 0xc5, 0x3}) 16:06:16 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) (async) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000200)=@netrom={'nr', 0x0}, 0x10) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000000)) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000002c0)={r2, 0x1}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f00000001c0)={0x1000, 0x1, 0x6a81, 0x6, &(0x7f0000000180)=[{0x2, 0x1, 0x1, 0x2}, {0xc5, 0x0, 0x400, 0x800}, {0xfffa, 0x3f, 0x1ff, 0x300}, {0x7, 0x4, 0x1, 0x9}, {0x40, 0xfffe, 0x40, 0x4}, {0x5, 0x1, 0x100, 0x9839}]}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x400) (async, rerun: 32) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 32) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000480)={&(0x7f0000000400)=[r5, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x2, 0xfff, 0x4, 0xffff], 0x3, 0x1}) (async) r6 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000000300)=""/139) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000280)={0x8, 0x2, 0xa, 0x5, 0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000140)={0x0, 0x1}) (rerun: 32) 16:06:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/raid0', 0x84000, 0x20) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x6, 0x9, 0x80000000, 0x101, 0x100, 0x2, 0x6, 0x1516, 0x2}) 16:06:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) 16:06:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x7, 0x0, 0x1}) 16:06:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x2, 0x7fff, 0x8, 0x5, 0x2, 0x3], 0x6, 0x401, 0x8, 0x5, 0x0, 0x2, 0x5, {0xd3, 0x9bf, 0x1, 0xb3d, 0x43eb, 0x1ff, 0x9, 0x7, 0x401, 0xda, 0x1, 0x200, 0xbe, 0x5, "4f6c384873b07c73cc085abde4406df54e41d4650d421ed49f83e6fe44aa4259"}}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f00000000c0)={0x0, 0x6}) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/aoe', 0x408200, 0x1ad) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x7, 0xc5, 0x3}) 16:06:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x2, 0x7fff, 0x8, 0x5, 0x2, 0x3], 0x6, 0x401, 0x8, 0x5, 0x0, 0x2, 0x5, {0xd3, 0x9bf, 0x1, 0xb3d, 0x43eb, 0x1ff, 0x9, 0x7, 0x401, 0xda, 0x1, 0x200, 0xbe, 0x5, "4f6c384873b07c73cc085abde4406df54e41d4650d421ed49f83e6fe44aa4259"}}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f00000000c0)={0x0, 0x6}) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/aoe', 0x408200, 0x1ad) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) (async) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x7, 0xc5, 0x3}) 16:06:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/raid0', 0x84000, 0x20) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x6, 0x9, 0x80000000, 0x101, 0x100, 0x2, 0x6, 0x1516, 0x2}) 16:06:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:16 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000200)=@netrom={'nr', 0x0}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000000)) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000002c0)={r2, 0x1}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f00000001c0)={0x1000, 0x1, 0x6a81, 0x6, &(0x7f0000000180)=[{0x2, 0x1, 0x1, 0x2}, {0xc5, 0x0, 0x400, 0x800}, {0xfffa, 0x3f, 0x1ff, 0x300}, {0x7, 0x4, 0x1, 0x9}, {0x40, 0xfffe, 0x40, 0x4}, {0x5, 0x1, 0x100, 0x9839}]}) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x400) (async) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000480)={&(0x7f0000000400)=[r5, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x2, 0xfff, 0x4, 0xffff], 0x3, 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000000300)=""/139) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000280)={0x8, 0x2, 0xa, 0x5, 0x1}) (async, rerun: 64) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000140)={0x0, 0x1}) (rerun: 64) 16:06:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x3, 0x0, 0x9, 0x40, 0x1, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8000000000, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x2000008, 0x7fff}) 16:06:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000000)={r1}) 16:06:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x3, 0x0, 0x9, 0x40, 0x1, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) 16:06:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000000)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000000)={r1}) (async) 16:06:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x10000003, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 16:06:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8000000000, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x2000008, 0x7fff}) 16:06:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x3, 0x0, 0x9, 0x40, 0x1, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x3, 0x0, 0x9, 0x40, 0x1, 0x7}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) 16:06:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x10000003, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x10000003, 0x6}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) 16:06:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8000000000, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x2000008, 0x7fff}) 16:06:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) 16:06:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000000)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000000)={r1}) (async) 16:06:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) 16:06:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x10000003, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 16:06:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000280)={0x4, 0x8, 0x200, 0x80, &(0x7f0000000100)=""/128, 0x58, &(0x7f0000000180)=""/88, 0x5b, &(0x7f0000000200)=""/91}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/tty', 0x200, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x3, 0x4006, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) 16:06:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x70, 0x0, 0x804], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[{}], 0x8000, 0x0, '\x00', 0x1, 0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x8}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) 16:06:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) (async) 16:06:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) 16:06:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r2, 0x80000}) 16:06:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x70, 0x0, 0x804], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[{}], 0x8000, 0x0, '\x00', 0x1, 0x1}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x8}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) 16:06:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) (async) 16:06:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000280)={0x4, 0x8, 0x200, 0x80, &(0x7f0000000100)=""/128, 0x58, &(0x7f0000000180)=""/88, 0x5b, &(0x7f0000000200)=""/91}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/tty', 0x200, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x3, 0x4006, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) 16:06:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) 16:06:16 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000100)={0x0, r0, 0x9, 0x1, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x1, 0x8, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000440)={0x0, 0x3, 0x8, 0xb0, &(0x7f0000000280)=""/176, 0xe7, &(0x7f0000000340)=""/231, 0xb, &(0x7f0000000040)=""/11}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000580)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r4, 0xc01064c1, &(0x7f00000005c0)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000180)=[r0, r0, r3, 0x0, r0], &(0x7f00000001c0)=[0x3, 0xff], 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000540)={&(0x7f00000004c0)=[r0, r6], &(0x7f0000000500)=[0x4], 0x2}) 16:06:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r2, 0x80000}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r2, 0x80000}) (async) 16:06:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00000000c0)) 16:06:16 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000100)={0x0, r0, 0x9, 0x1, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x1, 0x8, 0x5}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000140)={0x0}) (async) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000440)={0x0, 0x3, 0x8, 0xb0, &(0x7f0000000280)=""/176, 0xe7, &(0x7f0000000340)=""/231, 0xb, &(0x7f0000000040)=""/11}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000580)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r4, 0xc01064c1, &(0x7f00000005c0)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000180)=[r0, r0, r3, 0x0, r0], &(0x7f00000001c0)=[0x3, 0xff], 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000540)={&(0x7f00000004c0)=[r0, r6], &(0x7f0000000500)=[0x4], 0x2}) 16:06:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/mem', 0x1, 0x1) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={r2, 0x4c}) 16:06:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x70, 0x0, 0x804], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[{}], 0x8000, 0x0, '\x00', 0x1, 0x1}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x8}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) 16:06:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00000000c0)) 16:06:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000280)={0x4, 0x8, 0x200, 0x80, &(0x7f0000000100)=""/128, 0x58, &(0x7f0000000180)=""/88, 0x5b, &(0x7f0000000200)=""/91}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/tty', 0x200, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x3, 0x4006, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) 16:06:16 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000100)={0x0, r0, 0x9, 0x1, 0x1}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x1, 0x8, 0x5}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 32) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000140)={0x0}) (async) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000440)={0x0, 0x3, 0x8, 0xb0, &(0x7f0000000280)=""/176, 0xe7, &(0x7f0000000340)=""/231, 0xb, &(0x7f0000000040)=""/11}) (async) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000580)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r4, 0xc01064c1, &(0x7f00000005c0)={r5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000180)=[r0, r0, r3, 0x0, r0], &(0x7f00000001c0)=[0x3, 0xff], 0x5, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000540)={&(0x7f00000004c0)=[r0, r6], &(0x7f0000000500)=[0x4], 0x2}) 16:06:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00000000c0)) 16:06:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x4, 0x3, 0x7ffffffb, 0x10004, 0x3f, 0xc, 0x7}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x80000001}) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f00000010c0)={0x1000, &(0x7f00000000c0)=""/4096}) 16:06:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r2, 0x80000}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r2, 0x80000}) (async) 16:06:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x7fff, 0x2000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000340)={0x8, 0xcbe, {0xffffffffffffffff}, {0xee01}, 0x1, 0x80000001}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x3, 0x4, 0x7, 0x2}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000001c0)=0x5) 16:06:16 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/qxl', 0x511002, 0x104) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000002c0)={0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000240)={0x10001, 0x7a, 0xfffffff8, 0x8, 0xe, 0xff}) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x7, 0x8], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000100)={0x7f, 0x0, 0xb, 0x9, 0xbd, 0x6, 0x8}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000180)={0x8}) 16:06:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/mem', 0x1, 0x1) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={r2, 0x4c}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/mem', 0x1, 0x1) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={r2, 0x4c}) (async) 16:06:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000000)) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x7fff, 0x2000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000340)={0x8, 0xcbe, {0xffffffffffffffff}, {0xee01}, 0x1, 0x80000001}) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x3, 0x4, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000001c0)=0x5) (rerun: 64) 16:06:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x4, 0x3, 0x7ffffffb, 0x10004, 0x3f, 0xc, 0x7}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x80000001}) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f00000010c0)={0x1000, &(0x7f00000000c0)=""/4096}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x4, 0x3, 0x7ffffffb, 0x10004, 0x3f, 0xc, 0x7}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x80000001}) (async) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f00000010c0)={0x1000, &(0x7f00000000c0)=""/4096}) (async) 16:06:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async, rerun: 32) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/mem', 0x1, 0x1) (rerun: 32) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={r2, 0x4c}) [ 1184.330855] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:16 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/qxl', 0x511002, 0x104) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000002c0)={0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000240)={0x10001, 0x7a, 0xfffffff8, 0x8, 0xe, 0xff}) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x7, 0x8], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000100)={0x7f, 0x0, 0xb, 0x9, 0xbd, 0x6, 0x8}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000180)={0x8}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/qxl', 0x511002, 0x104) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000002c0)={0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000200)) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000240)={0x10001, 0x7a, 0xfffffff8, 0x8, 0xe, 0xff}) (async) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x7, 0x8], 0x2, 0x800}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000100)={0x7f, 0x0, 0xb, 0x9, 0xbd, 0x6, 0x8}) (async) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000180)={0x8}) (async) 16:06:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x7fff, 0x2000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000340)={0x8, 0xcbe, {0xffffffffffffffff}, {0xee01}, 0x1, 0x80000001}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x3, 0x4, 0x7, 0x2}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000001c0)=0x5) 16:06:16 executing program 1: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x100000001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2}) 16:06:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:16 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/qxl', 0x511002, 0x104) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000002c0)={0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000240)={0x10001, 0x7a, 0xfffffff8, 0x8, 0xe, 0xff}) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x7, 0x8], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000100)={0x7f, 0x0, 0xb, 0x9, 0xbd, 0x6, 0x8}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000180)={0x8}) 16:06:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) [ 1184.380479] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1184.409170] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x4, 0x3, 0x7ffffffb, 0x10004, 0x3f, 0xc, 0x7}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x80000001}) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f00000010c0)={0x1000, &(0x7f00000000c0)=""/4096}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x4, 0x3, 0x7ffffffb, 0x10004, 0x3f, 0xc, 0x7}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x80000001}) (async) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f00000010c0)={0x1000, &(0x7f00000000c0)=""/4096}) (async) 16:06:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000000)=0x3) 16:06:16 executing program 1: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x100000001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_open_dev$dri(&(0x7f0000000080), 0x100000001, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2}) (async) 16:06:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:16 executing program 2: ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x8880) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/auth_rpcgss', 0x2200, 0x12e) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000040)={0x0, 0x9, 0x1, 0x8001, 0x1, 0xd, 0x800000}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x59, &(0x7f00000000c0)=""/89}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000380)=0x1ff) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x101000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f00000001c0)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 16:06:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x80000001, 0xc9, 0x1000], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x5, 0x5, 0x7fff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x8, 0x4, 0x0, 0x9}) 16:06:16 executing program 1: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x100000001, 0x0) (rerun: 64) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2}) 16:06:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8001, 0x400, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x64, 0x0, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x6, 0x93}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0xfff, 0x10, 0xffffffff}) 16:06:16 executing program 2: ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x8880) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/auth_rpcgss', 0x2200, 0x12e) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000040)={0x0, 0x9, 0x1, 0x8001, 0x1, 0xd, 0x800000}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x59, &(0x7f00000000c0)=""/89}) (async) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000380)=0x1ff) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x101000) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x40) (rerun: 64) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f00000001c0)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 16:06:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000000)=0x3) 16:06:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={r1, r2, 0x1f, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) [ 1184.495480] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1184.520002] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000000)=0x3) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000000)=0x3) (async) 16:06:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8001, 0x400, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x64, 0x0, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x6, 0x93}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0xfff, 0x10, 0xffffffff}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8001, 0x400, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x64, 0x0, 0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x6, 0x93}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0xfff, 0x10, 0xffffffff}) (async) 16:06:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={r1, r2, 0x1f, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={r1, r2, 0x1f, 0x1, 0x6}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) 16:06:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x80000001, 0xc9, 0x1000], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x5, 0x5, 0x7fff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x8, 0x4, 0x0, 0x9}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x80000001, 0xc9, 0x1000], 0x3, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x5, 0x5, 0x7fff}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x8, 0x4, 0x0, 0x9}) (async) 16:06:16 executing program 2: ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x8880) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/auth_rpcgss', 0x2200, 0x12e) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000040)={0x0, 0x9, 0x1, 0x8001, 0x1, 0xd, 0x800000}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x59, &(0x7f00000000c0)=""/89}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000380)=0x1ff) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x101000) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f00000001c0)={0x0, 0x0, 0x9}) (async) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 16:06:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8001, 0x400, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x64, 0x0, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x6, 0x93}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0xfff, 0x10, 0xffffffff}) 16:06:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000340)={0xe0000000, 0x10001, 0xfffffffb, 0x0, 0x1e, 0x8000}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000300)={&(0x7f0000000280)=[r3, r4, 0x0, r5, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0xdf67, 0x5, 0xc52, 0x28c9, 0x1, 0x4], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, r6, r7], &(0x7f0000000140)=[0x2, 0x20], 0x3, 0x3, 0x6}) 16:06:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x800000000400, 0x2400) socketpair(0x2, 0x3, 0x52, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x148}, 0x1, 0x0, 0x0, 0xc880}, 0x40040) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) 16:06:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x80000001, 0xc9, 0x1000], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x5, 0x5, 0x7fff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x8, 0x4, 0x0, 0x9}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x80000001, 0xc9, 0x1000], 0x3, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x5, 0x5, 0x7fff}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x8, 0x4, 0x0, 0x9}) (async) 16:06:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000180)={0x4a, &(0x7f00000000c0)="05b9dbdd6cd046ee9101b38ec19e74786af88456a315d18d747105df397dbbeaf1b57c517407500d7962f276cbcf3b3987e2c1f5dc1518ee8b74f2f14fb1d7459c15819662b1fa31ca5e"}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={r1, r2, 0x1f, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={r1, r2, 0x1f, 0x1, 0x6}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) 16:06:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x7, 0x23}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x800000000400, 0x2400) socketpair(0x2, 0x3, 0x52, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x148}, 0x1, 0x0, 0x0, 0xc880}, 0x40040) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) syz_open_dev$dri(&(0x7f0000000000), 0x800000000400, 0x2400) (async) socketpair(0x2, 0x3, 0x52, &(0x7f0000000040)) (async) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x148}, 0x1, 0x0, 0x0, 0xc880}, 0x40040) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) (async) 16:06:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x2, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000000)={r1}) 16:06:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) 16:06:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000180)={0x4a, &(0x7f00000000c0)="05b9dbdd6cd046ee9101b38ec19e74786af88456a315d18d747105df397dbbeaf1b57c517407500d7962f276cbcf3b3987e2c1f5dc1518ee8b74f2f14fb1d7459c15819662b1fa31ca5e"}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) (async) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000340)={0xe0000000, 0x10001, 0xfffffffb, 0x0, 0x1e, 0x8000}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={0x0}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000300)={&(0x7f0000000280)=[r3, r4, 0x0, r5, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0xdf67, 0x5, 0xc52, 0x28c9, 0x1, 0x4], 0x7}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, r6, r7], &(0x7f0000000140)=[0x2, 0x20], 0x3, 0x3, 0x6}) 16:06:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x7, 0x23}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x7, 0x23}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) 16:06:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x800000000400, 0x2400) socketpair(0x2, 0x3, 0x52, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x148}, 0x1, 0x0, 0x0, 0xc880}, 0x40040) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) 16:06:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x2, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 32) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000000)={r1}) 16:06:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000180)={0x4a, &(0x7f00000000c0)="05b9dbdd6cd046ee9101b38ec19e74786af88456a315d18d747105df397dbbeaf1b57c517407500d7962f276cbcf3b3987e2c1f5dc1518ee8b74f2f14fb1d7459c15819662b1fa31ca5e"}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) (async) 16:06:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x100000000000000, 0x44080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x9, 0x7}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)="9359bd27d036461c2e0f160d9913e25961a0c34299e654555eed0fcc740b496798004cd55d61ea73b1225b3d8af43fd638ff2827ea0bd3e20f6cf1065f87906950182feb4cb9a09df2126efb320550ac1a9f4804f0de14695fc83ba37af768d7573455fd00334eb3ba8cb3a50da38dda9169c6f41035f91c64b83bcbec8bb5892287e4223dca0b0a972e794c88b525d26825023bc274604897353a3a8410c0d76fb96bbc130481d9ab63bfa3ce34217b437c4ca5f168d09cab0c6fa235decbccbade4d89c0dcde96e55074c92e12985e430cbfa014f1c3eb4e8a05c5aa4bc56d06c3929470a8", 0xe6}) 16:06:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000340)={0xe0000000, 0x10001, 0xfffffffb, 0x0, 0x1e, 0x8000}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000300)={&(0x7f0000000280)=[r3, r4, 0x0, r5, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0xdf67, 0x5, 0xc52, 0x28c9, 0x1, 0x4], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, r6, r7], &(0x7f0000000140)=[0x2, 0x20], 0x3, 0x3, 0x6}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) (async) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000340)={0xe0000000, 0x10001, 0xfffffffb, 0x0, 0x1e, 0x8000}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000300)={&(0x7f0000000280)=[r3, r4, 0x0, r5, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0xdf67, 0x5, 0xc52, 0x28c9, 0x1, 0x4], 0x7}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, r6, r7], &(0x7f0000000140)=[0x2, 0x20], 0x3, 0x3, 0x6}) (async) 16:06:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x7, 0x23}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x800, 0x220a02) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) 16:06:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x100000000000000, 0x44080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x9, 0x7}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)="9359bd27d036461c2e0f160d9913e25961a0c34299e654555eed0fcc740b496798004cd55d61ea73b1225b3d8af43fd638ff2827ea0bd3e20f6cf1065f87906950182feb4cb9a09df2126efb320550ac1a9f4804f0de14695fc83ba37af768d7573455fd00334eb3ba8cb3a50da38dda9169c6f41035f91c64b83bcbec8bb5892287e4223dca0b0a972e794c88b525d26825023bc274604897353a3a8410c0d76fb96bbc130481d9ab63bfa3ce34217b437c4ca5f168d09cab0c6fa235decbccbade4d89c0dcde96e55074c92e12985e430cbfa014f1c3eb4e8a05c5aa4bc56d06c3929470a8", 0xe6}) syz_open_dev$dri(&(0x7f0000000000), 0x100000000000000, 0x44080) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x9, 0x7}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)="9359bd27d036461c2e0f160d9913e25961a0c34299e654555eed0fcc740b496798004cd55d61ea73b1225b3d8af43fd638ff2827ea0bd3e20f6cf1065f87906950182feb4cb9a09df2126efb320550ac1a9f4804f0de14695fc83ba37af768d7573455fd00334eb3ba8cb3a50da38dda9169c6f41035f91c64b83bcbec8bb5892287e4223dca0b0a972e794c88b525d26825023bc274604897353a3a8410c0d76fb96bbc130481d9ab63bfa3ce34217b437c4ca5f168d09cab0c6fa235decbccbade4d89c0dcde96e55074c92e12985e430cbfa014f1c3eb4e8a05c5aa4bc56d06c3929470a8", 0xe6}) (async) 16:06:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) 16:06:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x2, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000000)={r1}) 16:06:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x800, 0x220a02) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) syz_open_dev$dri(&(0x7f0000000080), 0x800, 0x220a02) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) (async) 16:06:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x100000000000000, 0x44080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x9, 0x7}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)="9359bd27d036461c2e0f160d9913e25961a0c34299e654555eed0fcc740b496798004cd55d61ea73b1225b3d8af43fd638ff2827ea0bd3e20f6cf1065f87906950182feb4cb9a09df2126efb320550ac1a9f4804f0de14695fc83ba37af768d7573455fd00334eb3ba8cb3a50da38dda9169c6f41035f91c64b83bcbec8bb5892287e4223dca0b0a972e794c88b525d26825023bc274604897353a3a8410c0d76fb96bbc130481d9ab63bfa3ce34217b437c4ca5f168d09cab0c6fa235decbccbade4d89c0dcde96e55074c92e12985e430cbfa014f1c3eb4e8a05c5aa4bc56d06c3929470a8", 0xe6}) syz_open_dev$dri(&(0x7f0000000000), 0x100000000000000, 0x44080) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x9, 0x7}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)="9359bd27d036461c2e0f160d9913e25961a0c34299e654555eed0fcc740b496798004cd55d61ea73b1225b3d8af43fd638ff2827ea0bd3e20f6cf1065f87906950182feb4cb9a09df2126efb320550ac1a9f4804f0de14695fc83ba37af768d7573455fd00334eb3ba8cb3a50da38dda9169c6f41035f91c64b83bcbec8bb5892287e4223dca0b0a972e794c88b525d26825023bc274604897353a3a8410c0d76fb96bbc130481d9ab63bfa3ce34217b437c4ca5f168d09cab0c6fa235decbccbade4d89c0dcde96e55074c92e12985e430cbfa014f1c3eb4e8a05c5aa4bc56d06c3929470a8", 0xe6}) (async) 16:06:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x4], 0x1, 0x80800}) 16:06:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x80000000, 0x0, 0x6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000200)={0xf9, &(0x7f0000000100)=""/249}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x3c, 0x220900) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r4}) 16:06:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x6, 0x914ebf4, 0x0, 0x8, 0x1000, 0xfffffffc, 0x2}) 16:06:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x80000000, 0x0, 0x6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000200)={0xf9, &(0x7f0000000100)=""/249}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x3c, 0x220900) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r4}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x80000000, 0x0, 0x6}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000200)={0xf9, &(0x7f0000000100)=""/249}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000240), 0x3c, 0x220900) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r4}) (async) 16:06:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x800, 0x220a02) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) 16:06:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x6, 0x914ebf4, 0x0, 0x8, 0x1000, 0xfffffffc, 0x2}) 16:06:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffd, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/87) 16:06:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/fotg210_hcd', 0x0, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1000004, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x4], 0x1, 0x80800}) (rerun: 32) 16:06:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) 16:06:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x80000000, 0x0, 0x6}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000200)={0xf9, &(0x7f0000000100)=""/249}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x3c, 0x220900) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r4}) 16:06:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffd, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/87) 16:06:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x6, 0x914ebf4, 0x0, 0x8, 0x1000, 0xfffffffc, 0x2}) 16:06:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/fotg210_hcd', 0x0, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1000004, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x4], 0x1, 0x80800}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x4], 0x1, 0x80800}) (async) 16:06:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffd, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/87) 16:06:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x600001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000100)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x1, 0x0, 0x4}) 16:06:17 executing program 4: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x7, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0xd46, 0x101], 0x2, 0xffffffff, 0x6, 0x5, 0x1, 0x20, 0x8, {0x4, 0x5, 0x9, 0x7, 0x6, 0x881, 0x9, 0xc87e, 0x5, 0x0, 0x3, 0x7ff, 0xddd, 0xfff, "f1c657dc23b73738df56e1bf7f8db3cd85e7e4ce3373e829e19f2179d439081a"}}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000100)={0x7}) 16:06:17 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000180)="20def55df46d5f2c3b625b9d495f3e49b14bbc3a92031291c7f31771f17a9c17d07a7c7e578991efb98a9c7546142246a0962f655ed9f2bc9def236ac271c0fb339c9d80e625", 0x46}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000340)=[0xffff8000, 0xf8a], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[{}], 0x6, 0x0, '\x00', 0x6, 0x1}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/fotg210_hcd', 0x0, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1000004, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/fotg210_hcd', 0x0, 0x1) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1000004, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 16:06:17 executing program 4: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x7, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0xd46, 0x101], 0x2, 0xffffffff, 0x6, 0x5, 0x1, 0x20, 0x8, {0x4, 0x5, 0x9, 0x7, 0x6, 0x881, 0x9, 0xc87e, 0x5, 0x0, 0x3, 0x7ff, 0xddd, 0xfff, "f1c657dc23b73738df56e1bf7f8db3cd85e7e4ce3373e829e19f2179d439081a"}}) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x600001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x4}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x1, 0x0, 0x4}) 16:06:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040)={0x0, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x63808e74, 0x201) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0xe9, 0x3, 0x10001], 0x3, 0x401, 0x8c0, 0x2bf, 0x6, 0x4, 0x0, {0x7ff, 0xffff, 0x56d, 0xa28, 0x4, 0x9, 0xcee, 0x8, 0xffff, 0x9, 0x3, 0x81, 0x5, 0x9, "034e8cd09e9a9b90cf6cb17210f66e343feba85cee14b242755a2e24395d52cb"}}) 16:06:17 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000180)="20def55df46d5f2c3b625b9d495f3e49b14bbc3a92031291c7f31771f17a9c17d07a7c7e578991efb98a9c7546142246a0962f655ed9f2bc9def236ac271c0fb339c9d80e625", 0x46}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000340)=[0xffff8000, 0xf8a], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[{}], 0x6, 0x0, '\x00', 0x6, 0x1}) (async) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:17 executing program 5: getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x18, "1e3b9e46a837ae2562ffd0520b051ca1c70c29f8b9fab97b"}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={r0, @in6={{0xa, 0x4e20, 0x170, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffff001}}, 0x572}, &(0x7f0000000200)=0x90) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:17 executing program 4: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x7, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0xd46, 0x101], 0x2, 0xffffffff, 0x6, 0x5, 0x1, 0x20, 0x8, {0x4, 0x5, 0x9, 0x7, 0x6, 0x881, 0x9, 0xc87e, 0x5, 0x0, 0x3, 0x7ff, 0xddd, 0xfff, "f1c657dc23b73738df56e1bf7f8db3cd85e7e4ce3373e829e19f2179d439081a"}}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x7, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0xd46, 0x101], 0x2, 0xffffffff, 0x6, 0x5, 0x1, 0x20, 0x8, {0x4, 0x5, 0x9, 0x7, 0x6, 0x881, 0x9, 0xc87e, 0x5, 0x0, 0x3, 0x7ff, 0xddd, 0xfff, "f1c657dc23b73738df56e1bf7f8db3cd85e7e4ce3373e829e19f2179d439081a"}}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) 16:06:17 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000180)="20def55df46d5f2c3b625b9d495f3e49b14bbc3a92031291c7f31771f17a9c17d07a7c7e578991efb98a9c7546142246a0962f655ed9f2bc9def236ac271c0fb339c9d80e625", 0x46}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000340)=[0xffff8000, 0xf8a], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[{}], 0x6, 0x0, '\x00', 0x6, 0x1}) (async) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040)={0x0, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x63808e74, 0x201) (async, rerun: 32) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0xe9, 0x3, 0x10001], 0x3, 0x401, 0x8c0, 0x2bf, 0x6, 0x4, 0x0, {0x7ff, 0xffff, 0x56d, 0xa28, 0x4, 0x9, 0xcee, 0x8, 0xffff, 0x9, 0x3, 0x81, 0x5, 0x9, "034e8cd09e9a9b90cf6cb17210f66e343feba85cee14b242755a2e24395d52cb"}}) 16:06:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000100)={0x7}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000100)={0x7}) (async) 16:06:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x111080) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x600001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x4}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x1, 0x0, 0x4}) 16:06:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x50, 0x0, 0x1f00, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf7bd34bc82f80a55f10d16bbb022d9a2541000000088001007063690001000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464000f0002006e6574646576736937cc6d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073"], 0xa0}}, 0x20040000) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000001c0)={0x1000, 0x3, 0x4, 0x0, 0x3, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000380)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f00000003c0)=0x8001) 16:06:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x111080) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:17 executing program 5: getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x18, "1e3b9e46a837ae2562ffd0520b051ca1c70c29f8b9fab97b"}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={r0, @in6={{0xa, 0x4e20, 0x170, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffff001}}, 0x572}, &(0x7f0000000200)=0x90) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x18, "1e3b9e46a837ae2562ffd0520b051ca1c70c29f8b9fab97b"}, &(0x7f0000000100)=0x20) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={r0, @in6={{0xa, 0x4e20, 0x170, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffff001}}, 0x572}, &(0x7f0000000200)=0x90) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 16:06:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000180), 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000100)={0x10000, 0x34, 0x6, 0x7fff, 0x5, 0x5}) 16:06:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) (async) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x50, 0x0, 0x1f00, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf7bd34bc82f80a55f10d16bbb022d9a2541000000088001007063690001000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464000f0002006e6574646576736937cc6d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073"], 0xa0}}, 0x20040000) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000001c0)={0x1000, 0x3, 0x4, 0x0, 0x3, 0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000380)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f00000003c0)=0x8001) 16:06:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040)={0x0, 0x1}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x63808e74, 0x201) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0xe9, 0x3, 0x10001], 0x3, 0x401, 0x8c0, 0x2bf, 0x6, 0x4, 0x0, {0x7ff, 0xffff, 0x56d, 0xa28, 0x4, 0x9, 0xcee, 0x8, 0xffff, 0x9, 0x3, 0x81, 0x5, 0x9, "034e8cd09e9a9b90cf6cb17210f66e343feba85cee14b242755a2e24395d52cb"}}) 16:06:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000100)={0x7}) 16:06:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x111080) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000)) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000180), 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async, rerun: 64) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000100)={0x10000, 0x34, 0x6, 0x7fff, 0x5, 0x5}) (rerun: 64) 16:06:17 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x8}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0x9, 0x8}) 16:06:17 executing program 5: getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x18, "1e3b9e46a837ae2562ffd0520b051ca1c70c29f8b9fab97b"}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={r0, @in6={{0xa, 0x4e20, 0x170, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffff001}}, 0x572}, &(0x7f0000000200)=0x90) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:17 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x8}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x8}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x1}) (async) 16:06:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) (async) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x50, 0x0, 0x1f00, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf7bd34bc82f80a55f10d16bbb022d9a2541000000088001007063690001000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464000f0002006e6574646576736937cc6d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073"], 0xa0}}, 0x20040000) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000001c0)={0x1000, 0x3, 0x4, 0x0, 0x3, 0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000380)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f00000003c0)=0x8001) 16:06:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0x9, 0x8}) 16:06:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x8000, 0x381000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x6, 0x5}) 16:06:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000180), 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000100)={0x10000, 0x34, 0x6, 0x7fff, 0x5, 0x5}) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000180), 0x2, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000100)={0x10000, 0x34, 0x6, 0x7fff, 0x5, 0x5}) (async) 16:06:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x7, 0x349000) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x1, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x6, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f0000000000)={r5}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r6, 0xc02864ca, &(0x7f0000000240)={&(0x7f00000001c0)=[r5, r5, r5, r7, r8, r5], &(0x7f0000000200)=[0x2, 0x0, 0x7ff, 0x400, 0x8, 0x3f], 0x6, 0x6, 0x778d07d971fb4ec4}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) 16:06:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0x9, 0x8}) 16:06:17 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x8}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f00000000c0)={0x8, 0x200, 0xa50f, 0x400, 0xd2, 0x5, 0x3}) 16:06:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x7, 0x349000) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x1, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x6, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f0000000000)={r5}) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r6, 0xc02864ca, &(0x7f0000000240)={&(0x7f00000001c0)=[r5, r5, r5, r7, r8, r5], &(0x7f0000000200)=[0x2, 0x0, 0x7ff, 0x400, 0x8, 0x3f], 0x6, 0x6, 0x778d07d971fb4ec4}) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) 16:06:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffd, 0x404000) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x8000, 0x381000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x6, 0x5}) 16:06:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f00000000c0)={0x8, 0x200, 0xa50f, 0x400, 0xd2, 0x5, 0x3}) 16:06:17 executing program 1: r0 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@remote, @rose, @rose, @remote, @remote, @netrom, @netrom, @netrom]}, &(0x7f0000000040)=0x48, 0x80000) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000140)={@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x8000, 0x1, [@bcast, @bcast, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000100)=0x8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) getpeername$ax25(r3, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @default, @null, @bcast, @rose, @netrom, @bcast, @bcast]}, &(0x7f0000000240)=0x48) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x81}, &(0x7f0000000180)=0x8) 16:06:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x7, 0x349000) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x1, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x6, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f0000000000)={r5}) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r6, 0xc02864ca, &(0x7f0000000240)={&(0x7f00000001c0)=[r5, r5, r5, r7, r8, r5], &(0x7f0000000200)=[0x2, 0x0, 0x7ff, 0x400, 0x8, 0x3f], 0x6, 0x6, 0x778d07d971fb4ec4}) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) 16:06:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x8000, 0x381000) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x6, 0x5}) 16:06:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f00000000c0)={0x8, 0x200, 0xa50f, 0x400, 0xd2, 0x5, 0x3}) 16:06:17 executing program 1: r0 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@remote, @rose, @rose, @remote, @remote, @netrom, @netrom, @netrom]}, &(0x7f0000000040)=0x48, 0x80000) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000140)={@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x8000, 0x1, [@bcast, @bcast, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffd, 0x404000) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffd, 0x404000) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) 16:06:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1c000, 0x3, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:17 executing program 0: sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, 0x0, 0x100, 0x70bd2d, 0xe6, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x899}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0xc885) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={r2, 0x3, 0x9, 0xfff, 0x9, 0x3, 0x3, 0x3, 0x7, 0x981, 0x5, 0xe5}) 16:06:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000040)) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000100)=0x8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) getpeername$ax25(r3, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @default, @null, @bcast, @rose, @netrom, @bcast, @bcast]}, &(0x7f0000000240)=0x48) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x81}, &(0x7f0000000180)=0x8) 16:06:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffd, 0x404000) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/mtd', 0x48040, 0x10) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000140)={0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000040)=[0x1, 0x6, 0x0, 0x40, 0x7694, 0x9], 0x6, 0x400, 0x0, 0x2, 0x4, 0x2, 0x8, {0x5, 0x6, 0x1, 0x48e, 0x800, 0x8, 0x101, 0x5, 0x1ff, 0x8001, 0x1, 0x9, 0x8000, 0x9196, "f5d6c07cb47da8fe9ed3587196fbc3719885e40dd9c5282a4100ada01c5d1804"}}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) [ 1185.645372] sctp_getsockopt_delayed_ack: 60 callbacks suppressed [ 1185.645379] sctp: [Deprecated]: syz-executor.3 (pid 17809) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1185.645379] Use struct sctp_sack_info instead 16:06:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x9ffffd, 0x1000000, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5e, &(0x7f00000000c0)=""/94}) 16:06:17 executing program 1: r0 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@remote, @rose, @rose, @remote, @remote, @netrom, @netrom, @netrom]}, &(0x7f0000000040)=0x48, 0x80000) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000140)={@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x8000, 0x1, [@bcast, @bcast, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1c000, 0x3, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/mtd', 0x48040, 0x10) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000140)={0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000040)=[0x1, 0x6, 0x0, 0x40, 0x7694, 0x9], 0x6, 0x400, 0x0, 0x2, 0x4, 0x2, 0x8, {0x5, 0x6, 0x1, 0x48e, 0x800, 0x8, 0x101, 0x5, 0x1ff, 0x8001, 0x1, 0x9, 0x8000, 0x9196, "f5d6c07cb47da8fe9ed3587196fbc3719885e40dd9c5282a4100ada01c5d1804"}}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/mtd', 0x48040, 0x10) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000140)={0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000040)=[0x1, 0x6, 0x0, 0x40, 0x7694, 0x9], 0x6, 0x400, 0x0, 0x2, 0x4, 0x2, 0x8, {0x5, 0x6, 0x1, 0x48e, 0x800, 0x8, 0x101, 0x5, 0x1ff, 0x8001, 0x1, 0x9, 0x8000, 0x9196, "f5d6c07cb47da8fe9ed3587196fbc3719885e40dd9c5282a4100ada01c5d1804"}}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) (async) 16:06:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x9ffffd, 0x1000000, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5e, &(0x7f00000000c0)=""/94}) 16:06:18 executing program 0: sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, 0x0, 0x100, 0x70bd2d, 0xe6, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x899}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0xc885) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={r2, 0x3, 0x9, 0xfff, 0x9, 0x3, 0x3, 0x3, 0x7, 0x981, 0x5, 0xe5}) 16:06:18 executing program 1: getitimer(0x2, &(0x7f0000000100)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000300)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) setitimer(0x1, &(0x7f00000002c0)={{}, {0x0, 0x2710}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000180)={{r2, r3/1000+10000}, {r4, r5/1000+10000}}, &(0x7f00000001c0)) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@null, @bcast, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default]}) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)) getitimer(0x1, &(0x7f0000000040)) 16:06:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000100)=0x8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) getpeername$ax25(r3, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @default, @null, @bcast, @rose, @netrom, @bcast, @bcast]}, &(0x7f0000000240)=0x48) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x81}, &(0x7f0000000180)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000040)) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000100)=0x8) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) (async) getpeername$ax25(r3, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @default, @null, @bcast, @rose, @netrom, @bcast, @bcast]}, &(0x7f0000000240)=0x48) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x81}, &(0x7f0000000180)=0x8) (async) [ 1185.747914] sctp: [Deprecated]: syz-executor.3 (pid 17833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1185.747914] Use struct sctp_sack_info instead 16:06:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x9ffffd, 0x1000000, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5e, &(0x7f00000000c0)=""/94}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x9ffffd, 0x1000000, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5e, &(0x7f00000000c0)=""/94}) (async) 16:06:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1c000, 0x3, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:18 executing program 1: getitimer(0x2, &(0x7f0000000100)) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x8) (async) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000300)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) (async, rerun: 64) setitimer(0x1, &(0x7f00000002c0)={{}, {0x0, 0x2710}}, 0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000180)={{r2, r3/1000+10000}, {r4, r5/1000+10000}}, &(0x7f00000001c0)) (async) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@null, @bcast, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default]}) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) (rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)) (async) getitimer(0x1, &(0x7f0000000040)) 16:06:18 executing program 2: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x800000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, &(0x7f0000000000)=""/83}) 16:06:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x7ff, 0x3, 0x40, 0x81, 0x0, [0x8, 0x4, 0x3, 0x20e5], [0x8, 0x9, 0xfffffffc, 0x2], [0x0, 0x6, 0x20, 0xc905], [0xd79, 0xb634, 0xfffffffffffffffe, 0x80]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/mtd', 0x48040, 0x10) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000140)={0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000040)=[0x1, 0x6, 0x0, 0x40, 0x7694, 0x9], 0x6, 0x400, 0x0, 0x2, 0x4, 0x2, 0x8, {0x5, 0x6, 0x1, 0x48e, 0x800, 0x8, 0x101, 0x5, 0x1ff, 0x8001, 0x1, 0x9, 0x8000, 0x9196, "f5d6c07cb47da8fe9ed3587196fbc3719885e40dd9c5282a4100ada01c5d1804"}}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) [ 1185.835849] sctp: [Deprecated]: syz-executor.3 (pid 17853) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1185.835849] Use struct sctp_sack_info instead 16:06:18 executing program 1: getitimer(0x2, &(0x7f0000000100)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000300)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) setitimer(0x1, &(0x7f00000002c0)={{}, {0x0, 0x2710}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000180)={{r2, r3/1000+10000}, {r4, r5/1000+10000}}, &(0x7f00000001c0)) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@null, @bcast, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default]}) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)) getitimer(0x1, &(0x7f0000000040)) getitimer(0x2, &(0x7f0000000100)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x8) (async) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000300)) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) (async) setitimer(0x1, &(0x7f00000002c0)={{}, {0x0, 0x2710}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) clock_gettime(0x0, &(0x7f0000000140)) (async) setitimer(0x0, &(0x7f0000000180)={{r2, r3/1000+10000}, {r4, r5/1000+10000}}, &(0x7f00000001c0)) (async) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@null, @bcast, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default]}) (async) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)) (async) getitimer(0x1, &(0x7f0000000040)) (async) 16:06:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x7ff, 0x3, 0x40, 0x81, 0x0, [0x8, 0x4, 0x3, 0x20e5], [0x8, 0x9, 0xfffffffc, 0x2], [0x0, 0x6, 0x20, 0xc905], [0xd79, 0xb634, 0xfffffffffffffffe, 0x80]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:18 executing program 0: sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, 0x0, 0x100, 0x70bd2d, 0xe6, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x899}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0xc885) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={r2, 0x3, 0x9, 0xfff, 0x9, 0x3, 0x3, 0x3, 0x7, 0x981, 0x5, 0xe5}) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, 0x0, 0x100, 0x70bd2d, 0xe6, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x899}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0xc885) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={r2, 0x3, 0x9, 0xfff, 0x9, 0x3, 0x3, 0x3, 0x7, 0x981, 0x5, 0xe5}) (async) 16:06:18 executing program 2: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x800000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, &(0x7f0000000000)=""/83}) 16:06:18 executing program 1: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x7) 16:06:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x7ff, 0x3, 0x40, 0x81, 0x0, [0x8, 0x4, 0x3, 0x20e5], [0x8, 0x9, 0xfffffffc, 0x2], [0x0, 0x6, 0x20, 0xc905], [0xd79, 0xb634, 0xfffffffffffffffe, 0x80]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:18 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd4, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x9000}, {0x8, 0x13, 0x7}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x8000}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}]}, 0x40}}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r4}) 16:06:18 executing program 2: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x800000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, &(0x7f0000000000)=""/83}) 16:06:18 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)="217dd03f7c1f97531510506a0c5dd988ebef3ed323b0f4e06e8f5bf9838cedf1f56ddfc0bdc2b5e59ca8a910bb80d8bdfa193c0509d1f79e5266cc9002b306e767ed958dce794cb7be87164d975f7ef5c56d203305c9bbc15d7fbf0accfe98dfdb2cff19f93674e5babfa2e82f79cdcf15f5a1233054bcff3eac65cabfb2190df39d9e7f1e93212ff99314ec6cff192861eb16a49d5b8b01052da43f5fe7755c0296f69f9c16c84e5d8f462a7744eb040c4977f5aae82e72bd02d939572d46331ae55ab8ada2055b335f8115c49075f275cd96c3e17d71816fbd19975b5ad8954c3cccb6f3", 0xe5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000001240)={0x3, &(0x7f0000001200)=[{}, {}, {}]}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x1000000}) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000001280)=""/230) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000200)=""/4096) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000001380)=0x5) 16:06:18 executing program 1: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000000c0)={0x3, 0x9}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:18 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)="217dd03f7c1f97531510506a0c5dd988ebef3ed323b0f4e06e8f5bf9838cedf1f56ddfc0bdc2b5e59ca8a910bb80d8bdfa193c0509d1f79e5266cc9002b306e767ed958dce794cb7be87164d975f7ef5c56d203305c9bbc15d7fbf0accfe98dfdb2cff19f93674e5babfa2e82f79cdcf15f5a1233054bcff3eac65cabfb2190df39d9e7f1e93212ff99314ec6cff192861eb16a49d5b8b01052da43f5fe7755c0296f69f9c16c84e5d8f462a7744eb040c4977f5aae82e72bd02d939572d46331ae55ab8ada2055b335f8115c49075f275cd96c3e17d71816fbd19975b5ad8954c3cccb6f3", 0xe5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 32) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000001240)={0x3, &(0x7f0000001200)=[{}, {}, {}]}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x1000000}) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000001280)=""/230) (rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000200)=""/4096) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000001380)=0x5) 16:06:18 executing program 1: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x7) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x7) (async) 16:06:18 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd4, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x9000}, {0x8, 0x13, 0x7}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x8000}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) (async) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}]}, 0x40}}, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r4}) 16:06:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x7) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x7) (async) 16:06:18 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)="217dd03f7c1f97531510506a0c5dd988ebef3ed323b0f4e06e8f5bf9838cedf1f56ddfc0bdc2b5e59ca8a910bb80d8bdfa193c0509d1f79e5266cc9002b306e767ed958dce794cb7be87164d975f7ef5c56d203305c9bbc15d7fbf0accfe98dfdb2cff19f93674e5babfa2e82f79cdcf15f5a1233054bcff3eac65cabfb2190df39d9e7f1e93212ff99314ec6cff192861eb16a49d5b8b01052da43f5fe7755c0296f69f9c16c84e5d8f462a7744eb040c4977f5aae82e72bd02d939572d46331ae55ab8ada2055b335f8115c49075f275cd96c3e17d71816fbd19975b5ad8954c3cccb6f3", 0xe5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000001240)={0x3, &(0x7f0000001200)=[{}, {}, {}]}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x1000000}) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000001280)=""/230) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000200)=""/4096) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000001380)=0x5) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)="217dd03f7c1f97531510506a0c5dd988ebef3ed323b0f4e06e8f5bf9838cedf1f56ddfc0bdc2b5e59ca8a910bb80d8bdfa193c0509d1f79e5266cc9002b306e767ed958dce794cb7be87164d975f7ef5c56d203305c9bbc15d7fbf0accfe98dfdb2cff19f93674e5babfa2e82f79cdcf15f5a1233054bcff3eac65cabfb2190df39d9e7f1e93212ff99314ec6cff192861eb16a49d5b8b01052da43f5fe7755c0296f69f9c16c84e5d8f462a7744eb040c4977f5aae82e72bd02d939572d46331ae55ab8ada2055b335f8115c49075f275cd96c3e17d71816fbd19975b5ad8954c3cccb6f3", 0xe5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000001240)={0x3, &(0x7f0000001200)=[{}, {}, {}]}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x1000000}) (async) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000001280)=""/230) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000200)=""/4096) (async) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000001380)=0x5) (async) 16:06:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={r2, 0x25}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000280)={&(0x7f0000000200)=[r1, r3, 0x0, r4, 0x0, 0x0, r5, 0x0, r6, r7], &(0x7f0000000240)=[0x8, 0x1e05], 0xa}) 16:06:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000000c0)={0x3, 0x9}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:18 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd4, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x9000}, {0x8, 0x13, 0x7}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x8000}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}]}, 0x40}}, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r4}) 16:06:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 16:06:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000000c0)={0x3, 0x9}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000200), 0xfffffffffffffffe, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000240)={&(0x7f00000002c0)=[0x1, 0x1, 0x8, 0x1f, 0x5, 0xffffff7f, 0x2, 0x99], 0x8, 0xc0800, 0x0, 0xffffffffffffffff}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b00ff0300000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0001800000080001007063690011000200303030303a30303a31302e300000000008000b00ff7f0000"], 0xd0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000280)={0x1, 0x10001, 0x7, 0x5, 0x2a, 0xd, 0x1f}) nanosleep(&(0x7f0000000180)={r3, r4+10000000}, &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000340)={0x3, 0x2, 0xfd3, 0x4, 0x313, 0x2, 0x9, 0x80000000000}, &(0x7f0000000380)={0x405, 0x3, 0xfffffffffffffffc, 0x2, 0x63aea892, 0x3, 0x7fffffff, 0x100000001}, &(0x7f00000003c0)={0x9, 0x5, 0x0, 0xfffffffffffffffc, 0x9, 0x6b6f5e0f, 0x5, 0x1}, &(0x7f0000000480), &(0x7f0000000700)={&(0x7f00000004c0)={[0xffffffffffff26ee]}, 0x8}) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000000)={0xa, 0x4, 0x7, 0xfff, 0x6, 0x7a66, 0x3ff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={r2, 0x25}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000280)={&(0x7f0000000200)=[r1, r3, 0x0, r4, 0x0, 0x0, r5, 0x0, r6, r7], &(0x7f0000000240)=[0x8, 0x1e05], 0xa}) 16:06:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) (async) 16:06:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) r1 = getpgid(0x0) syz_open_procfs$namespace(r1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000280)={0x5, 0x3fd, {r1}, {0xee01}, 0x7f, 0xe93}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x1f, 0xf, 0x6, 0x8], 0xaeff, 0x4, 0x6}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x6a1, 0x666d40) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000100)={0x9, 0xf40, 0x81, 0xffffffff, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)) 16:06:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) 16:06:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async, rerun: 32) r1 = getpgid(0x0) (rerun: 32) syz_open_procfs$namespace(r1, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000280)={0x5, 0x3fd, {r1}, {0xee01}, 0x7f, 0xe93}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x1f, 0xf, 0x6, 0x8], 0xaeff, 0x4, 0x6}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x6a1, 0x666d40) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000100)={0x9, 0xf40, 0x81, 0xffffffff, 0x4, 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)) 16:06:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={r2, 0x25}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000280)={&(0x7f0000000200)=[r1, r3, 0x0, r4, 0x0, 0x0, r5, 0x0, r6, r7], &(0x7f0000000240)=[0x8, 0x1e05], 0xa}) syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={r2, 0x25}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000280)={&(0x7f0000000200)=[r1, r3, 0x0, r4, 0x0, 0x0, r5, 0x0, r6, r7], &(0x7f0000000240)=[0x8, 0x1e05], 0xa}) (async) 16:06:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) (async) 16:06:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 16:06:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = getpgid(0x0) ptrace(0x10, r1) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x100, 0x7, 0x7ff, 0x4, 0x11, 0x8}) 16:06:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000200), 0xfffffffffffffffe, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000240)={&(0x7f00000002c0)=[0x1, 0x1, 0x8, 0x1f, 0x5, 0xffffff7f, 0x2, 0x99], 0x8, 0xc0800, 0x0, 0xffffffffffffffff}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b00ff0300000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0001800000080001007063690011000200303030303a30303a31302e300000000008000b00ff7f0000"], 0xd0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000280)={0x1, 0x10001, 0x7, 0x5, 0x2a, 0xd, 0x1f}) nanosleep(&(0x7f0000000180)={r3, r4+10000000}, &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000340)={0x3, 0x2, 0xfd3, 0x4, 0x313, 0x2, 0x9, 0x80000000000}, &(0x7f0000000380)={0x405, 0x3, 0xfffffffffffffffc, 0x2, 0x63aea892, 0x3, 0x7fffffff, 0x100000001}, &(0x7f00000003c0)={0x9, 0x5, 0x0, 0xfffffffffffffffc, 0x9, 0x6b6f5e0f, 0x5, 0x1}, &(0x7f0000000480), &(0x7f0000000700)={&(0x7f00000004c0)={[0xffffffffffff26ee]}, 0x8}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000000)={0xa, 0x4, 0x7, 0xfff, 0x6, 0x7a66, 0x3ff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async, rerun: 32) r1 = getpgid(0x0) (rerun: 32) syz_open_procfs$namespace(r1, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000280)={0x5, 0x3fd, {r1}, {0xee01}, 0x7f, 0xe93}) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x1f, 0xf, 0x6, 0x8], 0xaeff, 0x4, 0x6}) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x6a1, 0x666d40) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000100)={0x9, 0xf40, 0x81, 0xffffffff, 0x4, 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)) 16:06:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) (async) openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 16:06:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = getpgid(0x0) ptrace(0x10, r1) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x100, 0x7, 0x7ff, 0x4, 0x11, 0x8}) 16:06:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2008, 0x21ca41) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x8, 0x1ff}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000000)={0x2}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000240)={0x0, 0x10}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/dvb_usb_mxl111sf', 0x9c0, 0xa1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000300)={0xffffffff, 0x7, 0x2, 0x4, 0x0, 0x4, 0xd6}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000100)={0x3, 0x1, 0xa29, 0x6, 0x3, [0x1, 0xfffffffd, 0x80000000, 0x3], [0x1000, 0x1f, 0x4, 0x1000], [0x1, 0x9, 0x4, 0x20], [0x4f, 0x9, 0x5, 0x6]}) 16:06:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000100)={0x19, &(0x7f00000000c0)=""/25}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = getpgid(0x0) ptrace(0x10, r1) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x100, 0x7, 0x7ff, 0x4, 0x11, 0x8}) 16:06:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2008, 0x21ca41) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x8, 0x1ff}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000000)={0x2}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000240)={0x0, 0x10}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/dvb_usb_mxl111sf', 0x9c0, 0xa1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x0, r4}) (async) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) (async) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000300)={0xffffffff, 0x7, 0x2, 0x4, 0x0, 0x4, 0xd6}) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000100)={0x3, 0x1, 0xa29, 0x6, 0x3, [0x1, 0xfffffffd, 0x80000000, 0x3], [0x1000, 0x1f, 0x4, 0x1000], [0x1, 0x9, 0x4, 0x20], [0x4f, 0x9, 0x5, 0x6]}) 16:06:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000100)={0x19, &(0x7f00000000c0)=""/25}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 16:06:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x800) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) (async) openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) 16:06:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000200), 0xfffffffffffffffe, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000240)={&(0x7f00000002c0)=[0x1, 0x1, 0x8, 0x1f, 0x5, 0xffffff7f, 0x2, 0x99], 0x8, 0xc0800, 0x0, 0xffffffffffffffff}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b00ff0300000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0001800000080001007063690011000200303030303a30303a31302e300000000008000b00ff7f0000"], 0xd0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000280)={0x1, 0x10001, 0x7, 0x5, 0x2a, 0xd, 0x1f}) nanosleep(&(0x7f0000000180)={r3, r4+10000000}, &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000340)={0x3, 0x2, 0xfd3, 0x4, 0x313, 0x2, 0x9, 0x80000000000}, &(0x7f0000000380)={0x405, 0x3, 0xfffffffffffffffc, 0x2, 0x63aea892, 0x3, 0x7fffffff, 0x100000001}, &(0x7f00000003c0)={0x9, 0x5, 0x0, 0xfffffffffffffffc, 0x9, 0x6b6f5e0f, 0x5, 0x1}, &(0x7f0000000480), &(0x7f0000000700)={&(0x7f00000004c0)={[0xffffffffffff26ee]}, 0x8}) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000000)={0xa, 0x4, 0x7, 0xfff, 0x6, 0x7a66, 0x3ff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000200), 0xfffffffffffffffe, 0x200) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) (async) clock_gettime(0x0, &(0x7f0000000140)) (async) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000240)={&(0x7f00000002c0)=[0x1, 0x1, 0x8, 0x1f, 0x5, 0xffffff7f, 0x2, 0x99], 0x8, 0xc0800}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b00ff0300000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0001800000080001007063690011000200303030303a30303a31302e300000000008000b00ff7f0000"], 0xd0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000280)={0x1, 0x10001, 0x7, 0x5, 0x2a, 0xd, 0x1f}) (async) nanosleep(&(0x7f0000000180)={r3, r4+10000000}, &(0x7f00000001c0)) (async) pselect6(0x40, &(0x7f0000000340)={0x3, 0x2, 0xfd3, 0x4, 0x313, 0x2, 0x9, 0x80000000000}, &(0x7f0000000380)={0x405, 0x3, 0xfffffffffffffffc, 0x2, 0x63aea892, 0x3, 0x7fffffff, 0x100000001}, &(0x7f00000003c0)={0x9, 0x5, 0x0, 0xfffffffffffffffc, 0x9, 0x6b6f5e0f, 0x5, 0x1}, &(0x7f0000000480), &(0x7f0000000700)={&(0x7f00000004c0)={[0xffffffffffff26ee]}, 0x8}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000000)={0xa, 0x4, 0x7, 0xfff, 0x6, 0x7a66, 0x3ff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 16:06:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2008, 0x21ca41) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x8, 0x1ff}) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000000)={0x2}) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000240)={0x0, 0x10}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/dvb_usb_mxl111sf', 0x9c0, 0xa1) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000300)={0xffffffff, 0x7, 0x2, 0x4, 0x0, 0x4, 0xd6}) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000100)={0x3, 0x1, 0xa29, 0x6, 0x3, [0x1, 0xfffffffd, 0x80000000, 0x3], [0x1000, 0x1f, 0x4, 0x1000], [0x1, 0x9, 0x4, 0x20], [0x4f, 0x9, 0x5, 0x6]}) 16:06:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000100)={0x19, &(0x7f00000000c0)=""/25}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000100)={0x19, &(0x7f00000000c0)=""/25}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) 16:06:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x800) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x800) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) 16:06:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x2, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x8000}) 16:06:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) 16:06:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x2, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x8000}) 16:06:20 executing program 1: ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0xa002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x1) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f00000000c0)={0x0, 0x8001, 0x3}) 16:06:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x2, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x8000}) 16:06:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000300)={0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, &(0x7f0000000000)=""/101}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x9, 0x1ff, 0x40, 0x7, 0x9, 0x0, 0x5], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000003c0)={0x6}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x9, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f00000001c0)={0x8, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={r3, 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000400)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000440)={0x0, 0x0, r5}) r6 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r6, 0xc04064aa, &(0x7f00000002c0)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}], 0x9, 0x0, '\x00', 0x8, 0x3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r0}) 16:06:20 executing program 1: ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x2}) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0xa002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x1) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f00000000c0)={0x0, 0x8001, 0x3}) 16:06:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x40100001, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x42) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) 16:06:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000000)={0x10001, 0x3, 0x0, 0xf099, 0x9, 0x3, 0x4}) 16:06:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x800) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000300)={0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, &(0x7f0000000000)=""/101}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x9, 0x1ff, 0x40, 0x7, 0x9, 0x0, 0x5], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000003c0)={0x6}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x9, 0x0}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f00000001c0)={0x8, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={r3, 0x7}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000400)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000440)={0x0, 0x0, r5}) (async) r6 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r6, 0xc04064aa, &(0x7f00000002c0)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}], 0x9, 0x0, '\x00', 0x8, 0x3}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r0}) 16:06:21 executing program 1: ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x2}) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0xa002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x1) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f00000000c0)={0x0, 0x8001, 0x3}) 16:06:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000000)={0x10001, 0x3, 0x0, 0xf099, 0x9, 0x3, 0x4}) (rerun: 32) 16:06:21 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) 16:06:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2}) 16:06:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000000)={0x10001, 0x3, 0x0, 0xf099, 0x9, 0x3, 0x4}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000000)={0x10001, 0x3, 0x0, 0xf099, 0x9, 0x3, 0x4}) (async) 16:06:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x40100001, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x42) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x40100001, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x42) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) (async) 16:06:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2}) 16:06:21 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) 16:06:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x2140) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000140)={0x8, 0x1, 0x5}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) 16:06:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x40100001, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x42) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) 16:06:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000300)={0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, &(0x7f0000000000)=""/101}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x9, 0x1ff, 0x40, 0x7, 0x9, 0x0, 0x5], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000003c0)={0x6}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x9, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f00000001c0)={0x8, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={r3, 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000400)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000440)={0x0, 0x0, r5}) r6 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r6, 0xc04064aa, &(0x7f00000002c0)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}], 0x9, 0x0, '\x00', 0x8, 0x3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r0}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000300)={0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, &(0x7f0000000000)=""/101}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x9, 0x1ff, 0x40, 0x7, 0x9, 0x0, 0x5], 0x7, 0x800}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000003c0)={0x6}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x9}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f00000001c0)={0x8, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={r3, 0x7}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000400)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000440)={0x0, 0x0, r5}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r6, 0xc04064aa, &(0x7f00000002c0)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}], 0x9, 0x0, '\x00', 0x8, 0x3}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r0}) (async) 16:06:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2}) 16:06:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x2140) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000140)={0x8, 0x1, 0x5}) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) 16:06:21 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) 16:06:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x6, 0x8e], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:21 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19f2}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xf2}, @jmp={0x5, 0x0, 0xa, 0x7, 0x1, 0x100}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0xdd, &(0x7f00000003c0)=""/221, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xa, 0xd63a, 0x75f}, 0x10}, 0x80) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) nanosleep(&(0x7f0000000340)={r0, r1+60000000}, &(0x7f0000000380)) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x5}) pselect6(0x40, &(0x7f0000000100)={0x766f0d8f, 0x0, 0x8, 0x1, 0x8, 0x9, 0x9, 0x5}, &(0x7f0000000140)={0x6, 0x7fffffff, 0xff, 0x97, 0x33, 0x1, 0x2, 0x10000}, &(0x7f0000000180)={0x2, 0x9, 0x8, 0x7, 0x200, 0x10001, 0x40, 0xdd5}, &(0x7f00000001c0), &(0x7f0000000500)={&(0x7f00000004c0)={[0xfff]}, 0x8}) 16:06:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x6, 0x8e], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x6, 0x8e], 0x2, 0x800}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 16:06:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x2140) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000140)={0x8, 0x1, 0x5}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x2140) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000140)={0x8, 0x1, 0x5}) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) (async) 16:06:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x3, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000001c0)={0xd2, 0x1, 0x1ff, 0x6, &(0x7f0000000180)=[{0x4, 0x7, 0xb0, 0x9e45}, {0x20, 0x8, 0x8, 0x5}, {0x5, 0x1, 0x7, 0x5d61}, {0x0, 0x0, 0x1, 0x1f}, {0x61b, 0x40, 0x9, 0x3}, {0x6, 0x1, 0x2, 0x9}]}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000100)={r1, 0xde0}) 16:06:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x1e9301) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000040)=[0x72c8, 0x80000000, 0xffff, 0x7, 0x3, 0x20, 0x0, 0x4], 0x8, 0x0, 0x6, 0x4, 0x4, 0xfffffffe, 0xffffff7f, {0x8, 0x4, 0x0, 0x7, 0x5, 0xfffd, 0x8, 0x88e, 0x7, 0x101, 0x8, 0xfff, 0x20, 0x2, "dff4115f61e408273781951814e7cf7bcb7d1aed95e8c0a3a0288aca896cb44f"}}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000500)) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x3, 0x8080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, 0x4, 0x2, 0x1000, 0x3b3], 0x5, 0x800}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000280)={0x12}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000400)={&(0x7f0000000340)="b7dd03b5239f018c0005dfc88b0bfcf557a5e6ed188810e79a6068552b1f8d76985ff47fb819560fd690ca9999a83f17b1c672e45bc9442653f78a80bb841dffa0a42e91e060d227f9d70491d8f4bbaf87caf66c9c4f01ff16c12507bdaf2579aa1fa347bd1ddda20ec99905940c7afc045fb5f9594c9b564622d0859c05142a01a06625c96e240768c595c940db0e82de2693882ffe6cc385f08297863e85fa90835301d59701e4e61a9d9b896d993c03cbb0b7ad895a1ec1eca8cf", 0xbc}) 16:06:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000000)={0x0, 0x31}) 16:06:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f00000002c0)={0x6, 0x4, 0x4, 0xf9, &(0x7f0000000100)=""/249, 0x77, &(0x7f0000000200)=""/119, 0x10, &(0x7f0000000280)=""/16}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x6, 0x8e], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x6, 0x8e], 0x2, 0x800}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 16:06:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000000)={0x0, 0x31}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000000)={0x0, 0x31}) (async) 16:06:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f00000002c0)={0x6, 0x4, 0x4, 0xf9, &(0x7f0000000100)=""/249, 0x77, &(0x7f0000000200)=""/119, 0x10, &(0x7f0000000280)=""/16}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f00000002c0)={0x6, 0x4, 0x4, 0xf9, &(0x7f0000000100)=""/249, 0x77, &(0x7f0000000200)=""/119, 0x10, &(0x7f0000000280)=""/16}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) 16:06:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x3, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000001c0)={0xd2, 0x1, 0x1ff, 0x6, &(0x7f0000000180)=[{0x4, 0x7, 0xb0, 0x9e45}, {0x20, 0x8, 0x8, 0x5}, {0x5, 0x1, 0x7, 0x5d61}, {0x0, 0x0, 0x1, 0x1f}, {0x61b, 0x40, 0x9, 0x3}, {0x6, 0x1, 0x2, 0x9}]}) (async) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000100)={r1, 0xde0}) 16:06:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x1e9301) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000040)=[0x72c8, 0x80000000, 0xffff, 0x7, 0x3, 0x20, 0x0, 0x4], 0x8, 0x0, 0x6, 0x4, 0x4, 0xfffffffe, 0xffffff7f, {0x8, 0x4, 0x0, 0x7, 0x5, 0xfffd, 0x8, 0x88e, 0x7, 0x101, 0x8, 0xfff, 0x20, 0x2, "dff4115f61e408273781951814e7cf7bcb7d1aed95e8c0a3a0288aca896cb44f"}}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x3, 0x8080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, 0x4, 0x2, 0x1000, 0x3b3], 0x5, 0x800}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000280)={0x12}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000400)={&(0x7f0000000340)="b7dd03b5239f018c0005dfc88b0bfcf557a5e6ed188810e79a6068552b1f8d76985ff47fb819560fd690ca9999a83f17b1c672e45bc9442653f78a80bb841dffa0a42e91e060d227f9d70491d8f4bbaf87caf66c9c4f01ff16c12507bdaf2579aa1fa347bd1ddda20ec99905940c7afc045fb5f9594c9b564622d0859c05142a01a06625c96e240768c595c940db0e82de2693882ffe6cc385f08297863e85fa90835301d59701e4e61a9d9b896d993c03cbb0b7ad895a1ec1eca8cf", 0xbc}) 16:06:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19f2}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xf2}, @jmp={0x5, 0x0, 0xa, 0x7, 0x1, 0x100}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0xdd, &(0x7f00000003c0)=""/221, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xa, 0xd63a, 0x75f}, 0x10}, 0x80) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) nanosleep(&(0x7f0000000340)={r0, r1+60000000}, &(0x7f0000000380)) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x5}) pselect6(0x40, &(0x7f0000000100)={0x766f0d8f, 0x0, 0x8, 0x1, 0x8, 0x9, 0x9, 0x5}, &(0x7f0000000140)={0x6, 0x7fffffff, 0xff, 0x97, 0x33, 0x1, 0x2, 0x10000}, &(0x7f0000000180)={0x2, 0x9, 0x8, 0x7, 0x200, 0x10001, 0x40, 0xdd5}, &(0x7f00000001c0), &(0x7f0000000500)={&(0x7f00000004c0)={[0xfff]}, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19f2}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xf2}, @jmp={0x5, 0x0, 0xa, 0x7, 0x1, 0x100}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0xdd, &(0x7f00000003c0)=""/221, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xa, 0xd63a, 0x75f}, 0x10}, 0x80) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000300)) (async) nanosleep(&(0x7f0000000340)={r0, r1+60000000}, &(0x7f0000000380)) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x5}) (async) pselect6(0x40, &(0x7f0000000100)={0x766f0d8f, 0x0, 0x8, 0x1, 0x8, 0x9, 0x9, 0x5}, &(0x7f0000000140)={0x6, 0x7fffffff, 0xff, 0x97, 0x33, 0x1, 0x2, 0x10000}, &(0x7f0000000180)={0x2, 0x9, 0x8, 0x7, 0x200, 0x10001, 0x40, 0xdd5}, &(0x7f00000001c0), &(0x7f0000000500)={&(0x7f00000004c0)={[0xfff]}, 0x8}) (async) 16:06:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000000)={0x0, 0x31}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000000)={0x0, 0x31}) (async) 16:06:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x3, 0x0, 0x2}) (rerun: 32) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000001c0)={0xd2, 0x1, 0x1ff, 0x6, &(0x7f0000000180)=[{0x4, 0x7, 0xb0, 0x9e45}, {0x20, 0x8, 0x8, 0x5}, {0x5, 0x1, 0x7, 0x5d61}, {0x0, 0x0, 0x1, 0x1f}, {0x61b, 0x40, 0x9, 0x3}, {0x6, 0x1, 0x2, 0x9}]}) (async) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000100)={r1, 0xde0}) 16:06:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0xfffffffb, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1}) 16:06:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x1e9301) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000040)=[0x72c8, 0x80000000, 0xffff, 0x7, 0x3, 0x20, 0x0, 0x4], 0x8, 0x0, 0x6, 0x4, 0x4, 0xfffffffe, 0xffffff7f, {0x8, 0x4, 0x0, 0x7, 0x5, 0xfffd, 0x8, 0x88e, 0x7, 0x101, 0x8, 0xfff, 0x20, 0x2, "dff4115f61e408273781951814e7cf7bcb7d1aed95e8c0a3a0288aca896cb44f"}}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x3, 0x8080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, 0x4, 0x2, 0x1000, 0x3b3], 0x5, 0x800}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000280)={0x12}) (async) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000400)={&(0x7f0000000340)="b7dd03b5239f018c0005dfc88b0bfcf557a5e6ed188810e79a6068552b1f8d76985ff47fb819560fd690ca9999a83f17b1c672e45bc9442653f78a80bb841dffa0a42e91e060d227f9d70491d8f4bbaf87caf66c9c4f01ff16c12507bdaf2579aa1fa347bd1ddda20ec99905940c7afc045fb5f9594c9b564622d0859c05142a01a06625c96e240768c595c940db0e82de2693882ffe6cc385f08297863e85fa90835301d59701e4e61a9d9b896d993c03cbb0b7ad895a1ec1eca8cf", 0xbc}) 16:06:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f00000002c0)={0x6, 0x4, 0x4, 0xf9, &(0x7f0000000100)=""/249, 0x77, &(0x7f0000000200)=""/119, 0x10, &(0x7f0000000280)=""/16}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000100)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000140)={0x0, 0x46}) 16:06:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0xfffffffb, 0x3, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1}) 16:06:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000180)={0x7ff, 0x400, 0x4, 0xa988, 0x585bef40}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000100)={0x7fff}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r0}) 16:06:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x200, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:22 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000100)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000180)) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)=0x4) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x40100) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x80000}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/l2tp_ppp', 0x240800, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000200)={r5}) 16:06:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000100)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000140)={0x0, 0x46}) 16:06:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19f2}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xf2}, @jmp={0x5, 0x0, 0xa, 0x7, 0x1, 0x100}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0xdd, &(0x7f00000003c0)=""/221, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xa, 0xd63a, 0x75f}, 0x10}, 0x80) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) nanosleep(&(0x7f0000000340)={r0, r1+60000000}, &(0x7f0000000380)) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x5}) pselect6(0x40, &(0x7f0000000100)={0x766f0d8f, 0x0, 0x8, 0x1, 0x8, 0x9, 0x9, 0x5}, &(0x7f0000000140)={0x6, 0x7fffffff, 0xff, 0x97, 0x33, 0x1, 0x2, 0x10000}, &(0x7f0000000180)={0x2, 0x9, 0x8, 0x7, 0x200, 0x10001, 0x40, 0xdd5}, &(0x7f00000001c0), &(0x7f0000000500)={&(0x7f00000004c0)={[0xfff]}, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19f2}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xf2}, @jmp={0x5, 0x0, 0xa, 0x7, 0x1, 0x100}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0xdd, &(0x7f00000003c0)=""/221, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xa, 0xd63a, 0x75f}, 0x10}, 0x80) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000300)) (async) nanosleep(&(0x7f0000000340)={r0, r1+60000000}, &(0x7f0000000380)) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x5}) (async) pselect6(0x40, &(0x7f0000000100)={0x766f0d8f, 0x0, 0x8, 0x1, 0x8, 0x9, 0x9, 0x5}, &(0x7f0000000140)={0x6, 0x7fffffff, 0xff, 0x97, 0x33, 0x1, 0x2, 0x10000}, &(0x7f0000000180)={0x2, 0x9, 0x8, 0x7, 0x200, 0x10001, 0x40, 0xdd5}, &(0x7f00000001c0), &(0x7f0000000500)={&(0x7f00000004c0)={[0xfff]}, 0x8}) (async) 16:06:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x200, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x200, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:22 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000100)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000180)) (async) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)=0x4) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x40100) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x80000}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/l2tp_ppp', 0x240800, 0x1) (async) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000200)={r5}) 16:06:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000100)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000140)={0x0, 0x46}) 16:06:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0xfffffffb, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0xfffffffb, 0x3}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1}) (async) 16:06:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000180)={0x7ff, 0x400, 0x4, 0xa988, 0x585bef40}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000100)={0x7fff}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r0}) 16:06:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x200, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x5018c0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000100)=0x401) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x40) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}], 0xfffffff7, 0x0, '\x00', 0x6, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:22 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000100)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000180)) (async) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)=0x4) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x40100) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/l2tp_ppp', 0x240800, 0x1) (async) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000200)={r5}) 16:06:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000180)={0x7ff, 0x400, 0x4, 0xa988, 0x585bef40}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000100)={0x7fff}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r0}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000180)={0x7ff, 0x400, 0x4, 0xa988, 0x585bef40}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000100)={0x7fff}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r0}) (async) 16:06:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0xfffffff7, 0x5, 0x4], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000180)={0x67c, 0x3, 0xffff8000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) socketpair(0x1e, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x4, 0xa8, 0x3, 0xa99c, 0x5}) 16:06:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000100)={r2, 0x8}) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000140)=[0x8, 0x8f], &(0x7f00000001c0), &(0x7f00000001c0), &(0x7f0000000200)=[0xd65, 0x80000001], 0x0, 0xfffffffffffffffd}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 16:06:22 executing program 1: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000100)={r0, 0x5ea, 0x5, 0x5, 0x8332, 0x83ea, 0xfffffff8, 0x0, 0x4, 0x8, 0x8, 0x40}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x2, 0x10001, {0x0}, {}, 0x1, 0x2}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000040)={0x1, 0x101, {r1}, {0xffffffffffffffff}, 0xff, 0x7fff}) 16:06:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x5018c0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000100)=0x401) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x40) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}], 0xfffffff7, 0x0, '\x00', 0x6, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xffff0016, 0x5, 0x6}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) 16:06:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0xfffffff7, 0x5, 0x4], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000180)={0x67c, 0x3, 0xffff8000}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) socketpair(0x1e, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x4, 0xa8, 0x3, 0xa99c, 0x5}) 16:06:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000100)={r2, 0x8}) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) (async) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000140)=[0x8, 0x8f], &(0x7f00000001c0), &(0x7f00000001c0), &(0x7f0000000200)=[0xd65, 0x80000001], 0x0, 0xfffffffffffffffd}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 16:06:22 executing program 1: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000100)={r0, 0x5ea, 0x5, 0x5, 0x8332, 0x83ea, 0xfffffff8, 0x0, 0x4, 0x8, 0x8, 0x40}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xffff0016, 0x5, 0x6}) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) 16:06:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x5018c0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000100)=0x401) (async) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x40) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}], 0xfffffff7, 0x0, '\x00', 0x6, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x2, 0x10001, {0x0}, {}, 0x1, 0x2}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000040)={0x1, 0x101, {r1}, {0xffffffffffffffff}, 0xff, 0x7fff}) 16:06:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000100)={r2, 0x8}) (async) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000140)=[0x8, 0x8f], &(0x7f00000001c0), &(0x7f00000001c0), &(0x7f0000000200)=[0xd65, 0x80000001], 0x0, 0xfffffffffffffffd}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 16:06:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0xfffffff7, 0x5, 0x4], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000180)={0x67c, 0x3, 0xffff8000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) socketpair(0x1e, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x4, 0xa8, 0x3, 0xa99c, 0x5}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0xfffffff7, 0x5, 0x4], 0x3, 0x800}) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000180)={0x67c, 0x3, 0xffff8000}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) socketpair(0x1e, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x4, 0xa8, 0x3, 0xa99c, 0x5}) (async) 16:06:22 executing program 1: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000100)={r0, 0x5ea, 0x5, 0x5, 0x8332, 0x83ea, 0xfffffff8, 0x0, 0x4, 0x8, 0x8, 0x40}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xffff0016, 0x5, 0x6}) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) 16:06:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x4, 0x0, 0xfff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/em28xx_alsa', 0xc0, 0x4b) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f00000002c0)={0x24, &(0x7f0000000280)=""/36}) 16:06:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x2, 0x10001, {0x0}, {}, 0x1, 0x2}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000040)={0x1, 0x101, {r1}, {0xffffffffffffffff}, 0xff, 0x7fff}) 16:06:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffe, 0x100080) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)="b398abd89f8ba13f4be2485b80a81f0bcda834ab18cf2340a3b4f2cdfd2b31307a47a9e84d02935bc53fd768343311dd7ea52b99c984100e01d86d57e024bdd6e5a6588762a726871e506772e61ec42dfdd920e549bf301af65b26e1853bfeff1c0d6088da26345feb806af8c949b0031ba555fadf9723ab", 0x78}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000180)={0x2, 0x0, 0x5, 0x80, 0x9901, 0x2, 0x5, 0x5, 0x9}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 16:06:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x100000001ff, 0x1010c1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x4, 0x0, 0xfff}) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/em28xx_alsa', 0xc0, 0x4b) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f00000002c0)={0x24, &(0x7f0000000280)=""/36}) 16:06:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffe, 0x100080) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)="b398abd89f8ba13f4be2485b80a81f0bcda834ab18cf2340a3b4f2cdfd2b31307a47a9e84d02935bc53fd768343311dd7ea52b99c984100e01d86d57e024bdd6e5a6588762a726871e506772e61ec42dfdd920e549bf301af65b26e1853bfeff1c0d6088da26345feb806af8c949b0031ba555fadf9723ab", 0x78}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000180)={0x2, 0x0, 0x5, 0x80, 0x9901, 0x2, 0x5, 0x5, 0x9}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffe, 0x100080) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)="b398abd89f8ba13f4be2485b80a81f0bcda834ab18cf2340a3b4f2cdfd2b31307a47a9e84d02935bc53fd768343311dd7ea52b99c984100e01d86d57e024bdd6e5a6588762a726871e506772e61ec42dfdd920e549bf301af65b26e1853bfeff1c0d6088da26345feb806af8c949b0031ba555fadf9723ab", 0x78}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000180)={0x2, 0x0, 0x5, 0x80, 0x9901, 0x2, 0x5, 0x5, 0x9}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) (async) 16:06:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x2, 0x100006, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x100000001ff, 0x1010c1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000000)=0x95) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000000)=0x95) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffe, 0x100080) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)="b398abd89f8ba13f4be2485b80a81f0bcda834ab18cf2340a3b4f2cdfd2b31307a47a9e84d02935bc53fd768343311dd7ea52b99c984100e01d86d57e024bdd6e5a6588762a726871e506772e61ec42dfdd920e549bf301af65b26e1853bfeff1c0d6088da26345feb806af8c949b0031ba555fadf9723ab", 0x78}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000180)={0x2, 0x0, 0x5, 0x80, 0x9901, 0x2, 0x5, 0x5, 0x9}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffe, 0x100080) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)="b398abd89f8ba13f4be2485b80a81f0bcda834ab18cf2340a3b4f2cdfd2b31307a47a9e84d02935bc53fd768343311dd7ea52b99c984100e01d86d57e024bdd6e5a6588762a726871e506772e61ec42dfdd920e549bf301af65b26e1853bfeff1c0d6088da26345feb806af8c949b0031ba555fadf9723ab", 0x78}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000180)={0x2, 0x0, 0x5, 0x80, 0x9901, 0x2, 0x5, 0x5, 0x9}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) (async) 16:06:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x2, 0x100006, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x4, 0x0, 0xfff}) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/em28xx_alsa', 0xc0, 0x4b) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f00000002c0)={0x24, &(0x7f0000000280)=""/36}) 16:06:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000000)=0x95) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x100000001ff, 0x1010c1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x100000001ff, 0x1010c1) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:22 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x240040, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000180)={'\x00', 0x89e, 0x2, 0x9}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x13}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x1a50c0) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000280)={0x0, 0xc}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000240)=[0x0, r4], &(0x7f0000000200)=[0x3, 0x6, 0x7fff], 0x2, 0x1}) 16:06:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x600002) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x580) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000280)=""/248) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x20}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000140)={0x4, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000180)={r5, 0x1000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3ff, 0xfffffbff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x2, 0x100006, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x2, 0x100006}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:22 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x240040, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000180)={'\x00', 0x89e, 0x2, 0x9}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 32) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x13}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x1a50c0) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000280)={0x0, 0xc}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000000)) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000240)=[0x0, r4], &(0x7f0000000200)=[0x3, 0x6, 0x7fff], 0x2, 0x1}) 16:06:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x600002) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x580) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000280)=""/248) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x20}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000140)={0x4, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000180)={r5, 0x1000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3ff, 0xfffffbff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x600002) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)) (async) syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x580) (async) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000280)=""/248) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x20}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000140)={0x4, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000180)={r5, 0x1000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3ff, 0xfffffbff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000100)={r1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) 16:06:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x200}, 0x8) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x5, 0x0, 0x10001}) 16:06:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x3, 0x20100005, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x181000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:22 executing program 4: ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000000)={0x1000, &(0x7f0000000200)=""/4096}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0xad84, 0x3], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x5, 0xbdc, 0x0, 0xffffffde, 0xb, 0x5, 0x2}) 16:06:22 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x240040, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000180)={'\x00', 0x89e, 0x2, 0x9}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 32) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x13}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x1a50c0) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000280)={0x0, 0xc}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000240)=[0x0, r4], &(0x7f0000000200)=[0x3, 0x6, 0x7fff], 0x2, 0x1}) 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x3, 0x20100005, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x181000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000100)={0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x46, &(0x7f0000000000)=""/70}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x5, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f00000000c0)={0x4d0, 0xf8, 0x4, 0x4a7}) 16:06:23 executing program 4: ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000000)={0x1000, &(0x7f0000000200)=""/4096}) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0xad84, 0x3], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x5, 0xbdc, 0x0, 0xffffffde, 0xb, 0x5, 0x2}) 16:06:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x600002) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x580) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000280)=""/248) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x20}) (async) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000140)={0x4, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000180)={r5, 0x1000}) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3ff, 0xfffffbff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000100)={r1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x200}, 0x8) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x5, 0x0, 0x10001}) 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x3, 0x20100005, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x181000) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000100)={0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x46, &(0x7f0000000000)=""/70}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x5, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f00000000c0)={0x4d0, 0xf8, 0x4, 0x4a7}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000100)={0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x46, &(0x7f0000000000)=""/70}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x5, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f00000000c0)={0x4d0, 0xf8, 0x4, 0x4a7}) (async) 16:06:23 executing program 4: ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000000)={0x1000, &(0x7f0000000200)=""/4096}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0xad84, 0x3], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x5, 0xbdc, 0x0, 0xffffffde, 0xb, 0x5, 0x2}) 16:06:23 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x8001, 0x200, 0xffff, 0xc68a], 0x4, 0x800, 0x0, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0x3eac, 0x401, 0x5, 0xa0, 0x1, 0xfffff001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x48) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/dvb_usb', 0x12000, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1a, 0x5, 0x3, 0x2, 0x10, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="181a0000", @ANYRES32, @ANYBLOB="0000000000000000afb0feffffffffff1842000003000000000000000000000018000000e6000000000000000200000018140000", @ANYRES32=r0, @ANYBLOB="000e64b5577b7f2ec31630c2968300000011000000850000004b00000085200000050000000e35adeb0ced05d544943fedf42f9c18b9f7a7d0d627d897fd5c0c35db72e4e764347493043040dda9"], &(0x7f0000000200)='GPL\x00', 0x1, 0xb5, &(0x7f0000000240)=""/181, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x8001, 0x80000001, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0x1, r2, r3, r4]}, 0x80) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000040)={0x3f, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f00000000c0)={0x2, r6}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x1, 0x7fffffff, 0x10001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000100)="c9108fa67183e41b30836773fa0561450e2aa70b43b1d3cb9dd89cf23da5", 0x1e}) 16:06:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x200}, 0x8) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x5, 0x0, 0x10001}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x200}, 0x8) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x5, 0x0, 0x10001}) (async) 16:06:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) syz_open_dev$dri(&(0x7f0000000000), 0x7fffffffffffffff, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8003, 0x1, 0x9}) 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x1, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x1, 0x7fffffff, 0x10001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:23 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x8001, 0x200, 0xffff, 0xc68a], 0x4, 0x800, 0x0, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0x3eac, 0x401, 0x5, 0xa0, 0x1, 0xfffff001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x48) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/dvb_usb', 0x12000, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1a, 0x5, 0x3, 0x2, 0x10, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="181a0000", @ANYRES32, @ANYBLOB="0000000000000000afb0feffffffffff1842000003000000000000000000000018000000e6000000000000000200000018140000", @ANYRES32=r0, @ANYBLOB="000e64b5577b7f2ec31630c2968300000011000000850000004b00000085200000050000000e35adeb0ced05d544943fedf42f9c18b9f7a7d0d627d897fd5c0c35db72e4e764347493043040dda9"], &(0x7f0000000200)='GPL\x00', 0x1, 0xb5, &(0x7f0000000240)=""/181, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x8001, 0x80000001, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0x1, r2, r3, r4]}, 0x80) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000040)={0x3f, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f00000000c0)={0x2, r6}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x8001, 0x200, 0xffff, 0xc68a], 0x4, 0x800}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0x3eac, 0x401, 0x5, 0xa0, 0x1, 0xfffff001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x48) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/dvb_usb', 0x12000, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1a, 0x5, 0x3, 0x2, 0x10, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="181a0000", @ANYRES32, @ANYBLOB="0000000000000000afb0feffffffffff1842000003000000000000000000000018000000e6000000000000000200000018140000", @ANYRES32=r0, @ANYBLOB="000e64b5577b7f2ec31630c2968300000011000000850000004b00000085200000050000000e35adeb0ced05d544943fedf42f9c18b9f7a7d0d627d897fd5c0c35db72e4e764347493043040dda9"], &(0x7f0000000200)='GPL\x00', 0x1, 0xb5, &(0x7f0000000240)=""/181, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x8001, 0x80000001, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0x1, r2, r3, r4]}, 0x80) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000040)={0x3f, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f00000000c0)={0x2, r6}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x1}) (async) 16:06:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000100)={0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x46, &(0x7f0000000000)=""/70}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x5, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f00000000c0)={0x4d0, 0xf8, 0x4, 0x4a7}) (rerun: 32) 16:06:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000100)="c9108fa67183e41b30836773fa0561450e2aa70b43b1d3cb9dd89cf23da5", 0x1e}) 16:06:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) syz_open_dev$dri(&(0x7f0000000000), 0x7fffffffffffffff, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8003, 0x1, 0x9}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x7fffffffffffffff, 0x20000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8003, 0x1, 0x9}) (async) 16:06:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1}) 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x1, 0x7fffffff, 0x10001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000100)="c9108fa67183e41b30836773fa0561450e2aa70b43b1d3cb9dd89cf23da5", 0x1e}) 16:06:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0x2, &(0x7f0000000440)={&(0x7f0000000480)={0x14c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1d463d18}, {0x6, 0x16, 0xff}, {0x5}, {0x6, 0x11, 0xda4e}, {0x8, 0xb, 0x8118}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7d4}, {0x6, 0x16, 0xff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xff0}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x1326}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6e06a8ba}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0xf800}, {0x8, 0xb, 0x5}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4c008) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio', 0x400000, 0x189) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000180)={0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000140)={0x3, 0xffffffff, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x77, &(0x7f00000001c0)=""/119}) 16:06:23 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x8001, 0x200, 0xffff, 0xc68a], 0x4, 0x800, 0x0, 0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0x3eac, 0x401, 0x5, 0xa0, 0x1, 0xfffff001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x48) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/dvb_usb', 0x12000, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1a, 0x5, 0x3, 0x2, 0x10, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="181a0000", @ANYRES32, @ANYBLOB="0000000000000000afb0feffffffffff1842000003000000000000000000000018000000e6000000000000000200000018140000", @ANYRES32=r0, @ANYBLOB="000e64b5577b7f2ec31630c2968300000011000000850000004b00000085200000050000000e35adeb0ced05d544943fedf42f9c18b9f7a7d0d627d897fd5c0c35db72e4e764347493043040dda9"], &(0x7f0000000200)='GPL\x00', 0x1, 0xb5, &(0x7f0000000240)=""/181, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x8001, 0x80000001, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0x1, r2, r3, r4]}, 0x80) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000040)={0x3f, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f00000000c0)={0x2, r6}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1}) (async) 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0x2, &(0x7f0000000440)={&(0x7f0000000480)={0x14c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1d463d18}, {0x6, 0x16, 0xff}, {0x5}, {0x6, 0x11, 0xda4e}, {0x8, 0xb, 0x8118}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7d4}, {0x6, 0x16, 0xff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xff0}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x1326}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6e06a8ba}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0xf800}, {0x8, 0xb, 0x5}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4c008) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio', 0x400000, 0x189) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000180)={0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000140)={0x3, 0xffffffff, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x77, &(0x7f00000001c0)=""/119}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0x2, &(0x7f0000000440)={&(0x7f0000000480)={0x14c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1d463d18}, {0x6, 0x16, 0xff}, {0x5}, {0x6, 0x11, 0xda4e}, {0x8, 0xb, 0x8118}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7d4}, {0x6, 0x16, 0xff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xff0}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x1326}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6e06a8ba}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0xf800}, {0x8, 0xb, 0x5}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4c008) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio', 0x400000, 0x189) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000180)={0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000140)={0x3, 0xffffffff, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x77, &(0x7f00000001c0)=""/119}) (async) 16:06:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000040)={0x2, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x4, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x1, 0x8000, 0x4992, 0x7fffffff, 0x8, 0x2], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f00000001c0)={r3}) 16:06:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) syz_open_dev$dri(&(0x7f0000000000), 0x7fffffffffffffff, 0x20000) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8003, 0x1, 0x9}) (rerun: 64) 16:06:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)={r2, 0x1}) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f00000002c0)={0x8, 0x4, 0xfb3, 0xff, 0x4, 0x3}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0xa2802) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000280)={0x1, 0x60, &(0x7f0000000200)=""/96}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)) 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1}) (rerun: 64) 16:06:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0x2, &(0x7f0000000440)={&(0x7f0000000480)={0x14c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1d463d18}, {0x6, 0x16, 0xff}, {0x5}, {0x6, 0x11, 0xda4e}, {0x8, 0xb, 0x8118}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7d4}, {0x6, 0x16, 0xff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xff0}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x1326}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6e06a8ba}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0xf800}, {0x8, 0xb, 0x5}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4c008) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio', 0x400000, 0x189) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000180)={0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000140)={0x3, 0xffffffff, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x77, &(0x7f00000001c0)=""/119}) 16:06:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000040)={0x2, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x4, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x1, 0x8000, 0x4992, 0x7fffffff, 0x8, 0x2], 0x6, 0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f00000001c0)={r3}) 16:06:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)={r2, 0x1}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f00000002c0)={0x8, 0x4, 0xfb3, 0xff, 0x4, 0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) (async) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0xa2802) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000280)={0x1, 0x60, &(0x7f0000000200)=""/96}) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)) 16:06:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffff837a, 0x4000) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000240)={0x401, 0x5, &(0x7f0000000140)=[0x5, 0x5, 0x5, 0x3, 0x80000000], &(0x7f0000000180)=[0xfff, 0x7f, 0x80, 0x1ff, 0x7], &(0x7f00000001c0)=[0x6, 0xe180, 0x3, 0x40, 0x6, 0x1c799de9, 0x8, 0xe0], &(0x7f0000000200)=[0x7ff, 0x3], 0x0, 0x100000000}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000340)={0x6, 0x6, 0x1, 0x8, 0x6, 0x40}) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={0x8, 0x4, 0x9, 0x8, 0x6e1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x800001, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000002c0)={0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000640)={&(0x7f0000000540)="47e2e6e8106df860e84f1be23b06c69d4bc4f1bfb901d84ff80700c514762178f7582e6599f2f278366d494628c70a7c1ed7326825d1fa7f0e837c481ac6ecb001959182d68d13f84a08ce0f535aeeff1eb5524191b7a3aeee8b408091a8c75eaeab5e8ab1799c940b5d72935caf75033299100b08ac30622740dca9fe638d9f85ef8c2fb386422cab1fd2ca470772f35fb5e08d56baa18ac549d0541bc24237c0d42f095c6fb77a42aeaad0fb52738178325243975fb955b294e1fcf7ff62c332841505cf12abd40dc005464a888c8fe209ce29fbfeca", 0xd7}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000380)={0x2, 0x0, 0x2}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4801}, 0x8000) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000003c0)={r6, 0x6}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000300)={r5, 0x28}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f00000000c0)) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffff837a, 0x4000) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000240)={0x401, 0x5, &(0x7f0000000140)=[0x5, 0x5, 0x5, 0x3, 0x80000000], &(0x7f0000000180)=[0xfff, 0x7f, 0x80, 0x1ff, 0x7], &(0x7f00000001c0)=[0x6, 0xe180, 0x3, 0x40, 0x6, 0x1c799de9, 0x8, 0xe0], &(0x7f0000000200)=[0x7ff, 0x3], 0x0, 0x100000000}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000340)={0x6, 0x6, 0x1, 0x8, 0x6, 0x40}) (async, rerun: 32) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={0x8, 0x4, 0x9, 0x8, 0x6e1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x800001, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000002c0)={0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {0x0}]}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000640)={&(0x7f0000000540)="47e2e6e8106df860e84f1be23b06c69d4bc4f1bfb901d84ff80700c514762178f7582e6599f2f278366d494628c70a7c1ed7326825d1fa7f0e837c481ac6ecb001959182d68d13f84a08ce0f535aeeff1eb5524191b7a3aeee8b408091a8c75eaeab5e8ab1799c940b5d72935caf75033299100b08ac30622740dca9fe638d9f85ef8c2fb386422cab1fd2ca470772f35fb5e08d56baa18ac549d0541bc24237c0d42f095c6fb77a42aeaad0fb52738178325243975fb955b294e1fcf7ff62c332841505cf12abd40dc005464a888c8fe209ce29fbfeca", 0xd7}) (rerun: 32) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000380)={0x2, 0x0, 0x2}) (async, rerun: 64) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (rerun: 64) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4801}, 0x8000) (async) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000003c0)={r6, 0x6}) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000300)={r5, 0x28}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 16:06:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)={r2, 0x1}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f00000002c0)={0x8, 0x4, 0xfb3, 0xff, 0x4, 0x3}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0xa2802) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000280)={0x1, 0x60, &(0x7f0000000200)=""/96}) (async, rerun: 64) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)) 16:06:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x10000}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x8}) 16:06:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f00000000c0)) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) 16:06:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000040)={0x2, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x4, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x1, 0x8000, 0x4992, 0x7fffffff, 0x8, 0x2], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f00000001c0)={r3}) 16:06:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffff837a, 0x4000) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000240)={0x401, 0x5, &(0x7f0000000140)=[0x5, 0x5, 0x5, 0x3, 0x80000000], &(0x7f0000000180)=[0xfff, 0x7f, 0x80, 0x1ff, 0x7], &(0x7f00000001c0)=[0x6, 0xe180, 0x3, 0x40, 0x6, 0x1c799de9, 0x8, 0xe0], &(0x7f0000000200)=[0x7ff, 0x3], 0x0, 0x100000000}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000340)={0x6, 0x6, 0x1, 0x8, 0x6, 0x40}) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={0x8, 0x4, 0x9, 0x8, 0x6e1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x800001, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000002c0)={0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000640)={&(0x7f0000000540)="47e2e6e8106df860e84f1be23b06c69d4bc4f1bfb901d84ff80700c514762178f7582e6599f2f278366d494628c70a7c1ed7326825d1fa7f0e837c481ac6ecb001959182d68d13f84a08ce0f535aeeff1eb5524191b7a3aeee8b408091a8c75eaeab5e8ab1799c940b5d72935caf75033299100b08ac30622740dca9fe638d9f85ef8c2fb386422cab1fd2ca470772f35fb5e08d56baa18ac549d0541bc24237c0d42f095c6fb77a42aeaad0fb52738178325243975fb955b294e1fcf7ff62c332841505cf12abd40dc005464a888c8fe209ce29fbfeca", 0xd7}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000380)={0x2, 0x0, 0x2}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4801}, 0x8000) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000003c0)={r6, 0x6}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000300)={r5, 0x28}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffff837a, 0x4000) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000240)={0x401, 0x5, &(0x7f0000000140)=[0x5, 0x5, 0x5, 0x3, 0x80000000], &(0x7f0000000180)=[0xfff, 0x7f, 0x80, 0x1ff, 0x7], &(0x7f00000001c0)=[0x6, 0xe180, 0x3, 0x40, 0x6, 0x1c799de9, 0x8, 0xe0], &(0x7f0000000200)=[0x7ff, 0x3], 0x0, 0x100000000}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000340)={0x6, 0x6, 0x1, 0x8, 0x6, 0x40}) (async) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={0x8, 0x4, 0x9, 0x8, 0x6e1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x800001, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000002c0)={0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000640)={&(0x7f0000000540)="47e2e6e8106df860e84f1be23b06c69d4bc4f1bfb901d84ff80700c514762178f7582e6599f2f278366d494628c70a7c1ed7326825d1fa7f0e837c481ac6ecb001959182d68d13f84a08ce0f535aeeff1eb5524191b7a3aeee8b408091a8c75eaeab5e8ab1799c940b5d72935caf75033299100b08ac30622740dca9fe638d9f85ef8c2fb386422cab1fd2ca470772f35fb5e08d56baa18ac549d0541bc24237c0d42f095c6fb77a42aeaad0fb52738178325243975fb955b294e1fcf7ff62c332841505cf12abd40dc005464a888c8fe209ce29fbfeca", 0xd7}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000380)={0x2, 0x0, 0x2}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4801}, 0x8000) (async) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000003c0)={r6, 0x6}) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000300)={r5, 0x28}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000100)={0x6}) 16:06:23 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x40, 0x4, 0x800, 0x4, 0x6, 0x9294, 0xe8c, 0x400, 0x65, 0x8], 0xa, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140), 0x8) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x7ff, 0x1, 0x1, 0x101, 0x7, 0x3, 0x6], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) 16:06:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000000c0)={0x0, 0x28}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)=0xde5) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000100)={0x1, 0x8, 0xfffffffc, 0x1, 0x3, 0xa970, 0x7e}) 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000100)={0x6}) 16:06:23 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x40, 0x4, 0x800, 0x4, 0x6, 0x9294, 0xe8c, 0x400, 0x65, 0x8], 0xa, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140), 0x8) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x7ff, 0x1, 0x1, 0x101, 0x7, 0x3, 0x6], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) 16:06:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x10000}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x8}) 16:06:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f00000000c0)) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000100)={0x6}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000100)={0x6}) (async) 16:06:23 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x40, 0x4, 0x800, 0x4, 0x6, 0x9294, 0xe8c, 0x400, 0x65, 0x8], 0xa, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140), 0x8) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x7ff, 0x1, 0x1, 0x101, 0x7, 0x3, 0x6], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) 16:06:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x10000}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x8}) 16:06:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 64) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000000c0)={0x0, 0x28}) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)=0xde5) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000100)={0x1, 0x8, 0xfffffffc, 0x1, 0x3, 0xa970, 0x7e}) [ 1191.188947] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000000)={0x1, 0xdc, 0x1, 0x80000001, 0x1, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) 16:06:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x4c4001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xc1e, 0x3, 0x3f}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000000c0)={0x0, 0x28}) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)=0xde5) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000100)={0x1, 0x8, 0xfffffffc, 0x1, 0x3, 0xa970, 0x7e}) 16:06:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000000)={0x1, 0xdc, 0x1, 0x80000001, 0x1, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00000000000600160000000000050012000000008fbb2d1f66648dc00008000b0000000000"], 0x64}}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000, 0xffff, 0x0, 0x4}) 16:06:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) r4 = syz_open_dev$dri(&(0x7f0000000380), 0x800, 0xac042) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f00000003c0)={0x0, 0xa}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) r7 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0xc0000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r9, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, r6, r6, r6, 0x0, r6, r10, r6, r11], 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000300)={&(0x7f00000002c0)=[0x2, 0x2, 0xffffffff], 0x3, 0x6, 0x1f, 0xfff, 0x3, 0x800, 0x5, {0x1, 0x1, 0xd99f, 0xf801, 0x8, 0x8, 0x2, 0x7, 0x2262, 0x6c, 0x1000, 0x0, 0x6, 0xc92, "a9ecc9e74b4da9804e442538690b5cc370fb5d30fce06207fab326eed1b347cc"}}) 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000000)={0x1, 0xdc, 0x1, 0x80000001, 0x1, 0x2, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) (async) 16:06:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x4c4001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xc1e, 0x3, 0x3f}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x4c4001) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xc1e, 0x3, 0x3f}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) 16:06:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/scsi_transport_iscsi', 0x2000, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000100)=""/60) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0xc0100) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0x5, 0x1000, 0x800, 0x400, 0x5, 0xffffffff, 0xd3, 0x845, 0x3a5c8ed3, 0xa8, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)) [ 1191.343101] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1191.344477] nla_parse: 12 callbacks suppressed [ 1191.344484] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 16:06:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) r4 = syz_open_dev$dri(&(0x7f0000000380), 0x800, 0xac042) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f00000003c0)={0x0, 0xa}) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) r7 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, 0x0) (async) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0xc0000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r9, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, r6, r6, r6, 0x0, r6, r10, r6, r11], 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000300)={&(0x7f00000002c0)=[0x2, 0x2, 0xffffffff], 0x3, 0x6, 0x1f, 0xfff, 0x3, 0x800, 0x5, {0x1, 0x1, 0xd99f, 0xf801, 0x8, 0x8, 0x2, 0x7, 0x2262, 0x6c, 0x1000, 0x0, 0x6, 0xc92, "a9ecc9e74b4da9804e442538690b5cc370fb5d30fce06207fab326eed1b347cc"}}) 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00000000000600160000000000050012000000008fbb2d1f66648dc00008000b0000000000"], 0x64}}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000, 0xffff, 0x0, 0x4}) 16:06:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) r4 = syz_open_dev$dri(&(0x7f0000000380), 0x800, 0xac042) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f00000003c0)={0x0, 0xa}) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) r7 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0xc0000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r9, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, r6, r6, r6, 0x0, r6, r10, r6, r11], 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000300)={&(0x7f00000002c0)=[0x2, 0x2, 0xffffffff], 0x3, 0x6, 0x1f, 0xfff, 0x3, 0x800, 0x5, {0x1, 0x1, 0xd99f, 0xf801, 0x8, 0x8, 0x2, 0x7, 0x2262, 0x6c, 0x1000, 0x0, 0x6, 0xc92, "a9ecc9e74b4da9804e442538690b5cc370fb5d30fce06207fab326eed1b347cc"}}) 16:06:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x4c4001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xc1e, 0x3, 0x3f}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x4c4001) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xc1e, 0x3, 0x3f}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) 16:06:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/scsi_transport_iscsi', 0x2000, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000100)=""/60) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/scsi_transport_iscsi', 0x2000, 0x1) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000100)=""/60) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) (async) 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) [ 1191.392540] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0xc0100) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0x5, 0x1000, 0x800, 0x400, 0x5, 0xffffffff, 0xd3, 0x845, 0x3a5c8ed3, 0xa8, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)) 16:06:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/scsi_transport_iscsi', 0x2000, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000100)=""/60) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000001c0)={0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x1, 0x5, 0x3d, 0x8, 0x1, [0x4, 0x33, 0x200, 0x400], [0x80000000, 0xa0, 0x0, 0x80000000], [0x0, 0xffffff53, 0x3, 0xa708], [0xffff, 0x0, 0xffffffff, 0x2]}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000180)={0x6000000000000, r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 64) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0xc0100) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0x5, 0x1000, 0x800, 0x400, 0x5, 0xffffffff, 0xd3, 0x845, 0x3a5c8ed3, 0xa8, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)) 16:06:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00000000000600160000000000050012000000008fbb2d1f66648dc00008000b0000000000"], 0x64}}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000, 0xffff, 0x0, 0x4}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00000000000600160000000000050012000000008fbb2d1f66648dc00008000b0000000000"], 0x64}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000, 0xffff, 0x0, 0x4}) (async) 16:06:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/carl9170', 0x18880, 0x117) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000100)=0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000001c0)={0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x1, 0x5, 0x3d, 0x8, 0x1, [0x4, 0x33, 0x200, 0x400], [0x80000000, 0xa0, 0x0, 0x80000000], [0x0, 0xffffff53, 0x3, 0xa708], [0xffff, 0x0, 0xffffffff, 0x2]}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000180)={0x6000000000000, r1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) [ 1191.467867] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 16:06:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/carl9170', 0x18880, 0x117) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000100)=0x2) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000001c0)={0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x1, 0x5, 0x3d, 0x8, 0x1, [0x4, 0x33, 0x200, 0x400], [0x80000000, 0xa0, 0x0, 0x80000000], [0x0, 0xffffff53, 0x3, 0xa708], [0xffff, 0x0, 0xffffffff, 0x2]}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000180)={0x6000000000000, r1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x403) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) [ 1191.539965] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1191.564990] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000100)=""/118) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6, 0x101, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x403) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x201, 0x4, 0x10003}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:23 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf4, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_FRAME={0xc9, 0x33, @assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x40}, @device_b, @broadcast, @initial, {0x4, 0x8}}, 0x40, 0x80, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0x9f, "ef384b658acbb8d8d1f64fdb0a0a2e15c0366440d8e19a24b7314b7e51a37499e1a45faad282fbe66598b69122fc9c6216fa6aee0bb321c99542b648c812f1991ffa1345c6213e4f6dfd11a2af54e26a1a52757648d146e7dda5819ed461c7f91f3ece50f31095a236b5c5ca456f331f2d68272c32be2eeccd859514dae2c904caa975c2bab1a0efb8207c128d6a9f4782e6440b73a079f5ce4612c4091327"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10}]]}, 0xf4}, 0x1, 0x0, 0x0, 0x4004}, 0x11) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f00000000c0)={0x0, 0x3f, 0xd27, 0xb2ca, 0x2, 0x7ff, 0x6, 0x20, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000240)={0x8000000000000001, 0x3}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) r4 = syz_open_dev$dri(&(0x7f00000001c0), 0x9, 0xd4541) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f0000000200)={0x2, 0x95, 0x2, 0x7, 0x3, 0x8, 0x2, 0x5}) 16:06:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/carl9170', 0x18880, 0x117) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000100)=0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/carl9170', 0x18880, 0x117) (async) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000100)=0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000100)=""/118) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6, 0x101, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:23 executing program 4: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0xad, 0x0, 0x0, 0x8}) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) pselect6(0x40, &(0x7f0000000380)={0x100}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)) 16:06:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x403) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) [ 1191.587794] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1191.604024] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:23 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf4, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_FRAME={0xc9, 0x33, @assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x40}, @device_b, @broadcast, @initial, {0x4, 0x8}}, 0x40, 0x80, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0x9f, "ef384b658acbb8d8d1f64fdb0a0a2e15c0366440d8e19a24b7314b7e51a37499e1a45faad282fbe66598b69122fc9c6216fa6aee0bb321c99542b648c812f1991ffa1345c6213e4f6dfd11a2af54e26a1a52757648d146e7dda5819ed461c7f91f3ece50f31095a236b5c5ca456f331f2d68272c32be2eeccd859514dae2c904caa975c2bab1a0efb8207c128d6a9f4782e6440b73a079f5ce4612c4091327"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10}]]}, 0xf4}, 0x1, 0x0, 0x0, 0x4004}, 0x11) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f00000000c0)={0x0, 0x3f, 0xd27, 0xb2ca, 0x2, 0x7ff, 0x6, 0x20, 0x6}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000240)={0x8000000000000001, 0x3}) (async) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) r4 = syz_open_dev$dri(&(0x7f00000001c0), 0x9, 0xd4541) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f0000000200)={0x2, 0x95, 0x2, 0x7, 0x3, 0x8, 0x2, 0x5}) 16:06:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x201, 0x4, 0x10003}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x201, 0x4, 0x10003}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000100)=""/118) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6, 0x101, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x3) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000100)={0x0, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x20040001, 0x400004, 0x4, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f0000000140)=""/1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 16:06:23 executing program 4: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0xad, 0x0, 0x0, 0x8}) (async) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) pselect6(0x40, &(0x7f0000000380)={0x100}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)) 16:06:23 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf4, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_FRAME={0xc9, 0x33, @assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x40}, @device_b, @broadcast, @initial, {0x4, 0x8}}, 0x40, 0x80, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0x9f, "ef384b658acbb8d8d1f64fdb0a0a2e15c0366440d8e19a24b7314b7e51a37499e1a45faad282fbe66598b69122fc9c6216fa6aee0bb321c99542b648c812f1991ffa1345c6213e4f6dfd11a2af54e26a1a52757648d146e7dda5819ed461c7f91f3ece50f31095a236b5c5ca456f331f2d68272c32be2eeccd859514dae2c904caa975c2bab1a0efb8207c128d6a9f4782e6440b73a079f5ce4612c4091327"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10}]]}, 0xf4}, 0x1, 0x0, 0x0, 0x4004}, 0x11) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f00000000c0)={0x0, 0x3f, 0xd27, 0xb2ca, 0x2, 0x7ff, 0x6, 0x20, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000240)={0x8000000000000001, 0x3}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) r4 = syz_open_dev$dri(&(0x7f00000001c0), 0x9, 0xd4541) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f0000000200)={0x2, 0x95, 0x2, 0x7, 0x3, 0x8, 0x2, 0x5}) 16:06:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x201, 0x4, 0x10003}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x5}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, r4, 0x0, 0x0, r5], &(0x7f0000000140)=[0x2, 0x8, 0x9, 0x3, 0x1], 0x5, 0x1}) 16:06:23 executing program 4: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0xad, 0x0, 0x0, 0x8}) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) pselect6(0x40, &(0x7f0000000380)={0x100}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0xad, 0x0, 0x0, 0x8}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000380)={0x100}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)) (async) 16:06:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)) (rerun: 32) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x3) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000100)={0x0, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x20040001, 0x400004, 0x4, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f0000000140)=""/1) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 16:06:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0xe905b764ab0c7504}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, r1, 0x0, 0x0, 0x0, 0x0, r2], &(0x7f00000001c0)=[0x5, 0x5], 0x8, 0x7, 0x7}) 16:06:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000003c0)={0x100, 0x1, &(0x7f00000002c0)=[0x4], &(0x7f0000000300)=[0x5, 0xb9, 0x10000, 0xfff, 0x7, 0x50, 0x800, 0x5, 0x1], &(0x7f0000000340)=[0x5, 0x5], &(0x7f0000000380)=[0x4, 0x1f, 0x7, 0xfff], 0x0, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="aa764c4e6624b19587d752aa6817247ed628a9196f045973339303a5", 0x1c, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000240)={r2, 0xd1, &(0x7f0000000140)=""/209}) 16:06:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x5}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000040)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, r4, 0x0, 0x0, r5], &(0x7f0000000140)=[0x2, 0x8, 0x9, 0x3, 0x1], 0x5, 0x1}) 16:06:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x803, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 32) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x3) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000100)={0x0, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x20040001, 0x400004, 0x4, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f0000000140)=""/1) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 16:06:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xd05, 0x6c800) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000140)={0x4a, &(0x7f00000000c0)="93e442420887dd052b9775a4f310ebdecdb21b0e20222aa66514d2c82e2069ac7bae3bafbeb99879d90e0687010e163b3fb28ea262b5fdb4211c6a88292efd80f5785fceddfa174d35ce"}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r3}) 16:06:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x803, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x803, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 16:06:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x5}) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000040)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, r4, 0x0, 0x0, r5], &(0x7f0000000140)=[0x2, 0x8, 0x9, 0x3, 0x1], 0x5, 0x1}) 16:06:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000003c0)={0x100, 0x1, &(0x7f00000002c0)=[0x4], &(0x7f0000000300)=[0x5, 0xb9, 0x10000, 0xfff, 0x7, 0x50, 0x800, 0x5, 0x1], &(0x7f0000000340)=[0x5, 0x5], &(0x7f0000000380)=[0x4, 0x1f, 0x7, 0xfff], 0x0, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="aa764c4e6624b19587d752aa6817247ed628a9196f045973339303a5", 0x1c, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000240)={r2, 0xd1, &(0x7f0000000140)=""/209}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000003c0)={0x100, 0x1, &(0x7f00000002c0)=[0x4], &(0x7f0000000300)=[0x5, 0xb9, 0x10000, 0xfff, 0x7, 0x50, 0x800, 0x5, 0x1], &(0x7f0000000340)=[0x5, 0x5], &(0x7f0000000380)=[0x4, 0x1f, 0x7, 0xfff], 0x0, 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="aa764c4e6624b19587d752aa6817247ed628a9196f045973339303a5", 0x1c}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000240)={r2, 0xd1, &(0x7f0000000140)=""/209}) (async) 16:06:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0xe905b764ab0c7504}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, r1, 0x0, 0x0, 0x0, 0x0, r2], &(0x7f00000001c0)=[0x5, 0x5], 0x8, 0x7, 0x7}) 16:06:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xd05, 0x6c800) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000140)={0x4a, &(0x7f00000000c0)="93e442420887dd052b9775a4f310ebdecdb21b0e20222aa66514d2c82e2069ac7bae3bafbeb99879d90e0687010e163b3fb28ea262b5fdb4211c6a88292efd80f5785fceddfa174d35ce"}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0xd05, 0x6c800) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x8}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000140)={0x4a, &(0x7f00000000c0)="93e442420887dd052b9775a4f310ebdecdb21b0e20222aa66514d2c82e2069ac7bae3bafbeb99879d90e0687010e163b3fb28ea262b5fdb4211c6a88292efd80f5785fceddfa174d35ce"}) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r3}) (async) 16:06:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0xe905b764ab0c7504}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, r1, 0x0, 0x0, 0x0, 0x0, r2], &(0x7f00000001c0)=[0x5, 0x5], 0x8, 0x7, 0x7}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0xe905b764ab0c7504}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, r1, 0x0, 0x0, 0x0, 0x0, r2], &(0x7f00000001c0)=[0x5, 0x5], 0x8, 0x7, 0x7}) (async) 16:06:24 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pnp0', 0xf2000, 0x10c) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140), 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x803, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x803, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 16:06:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xd05, 0x6c800) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000140)={0x4a, &(0x7f00000000c0)="93e442420887dd052b9775a4f310ebdecdb21b0e20222aa66514d2c82e2069ac7bae3bafbeb99879d90e0687010e163b3fb28ea262b5fdb4211c6a88292efd80f5785fceddfa174d35ce"}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0xd05, 0x6c800) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x8}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000140)={0x4a, &(0x7f00000000c0)="93e442420887dd052b9775a4f310ebdecdb21b0e20222aa66514d2c82e2069ac7bae3bafbeb99879d90e0687010e163b3fb28ea262b5fdb4211c6a88292efd80f5785fceddfa174d35ce"}) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r3}) (async) 16:06:24 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x8008080}, 0xc8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x1d8, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x24004081}, 0x5) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x10000000, 0x26042) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="000000002e15123cdd028bfca710be754dca6864117798e253637c63489aca90e7c34066afa2d379896a2d2a299ff8a47ed0b8902833887b6b5860f8709599d3d9b46f9cabfb2361f09546fade762899642be7552c4add57f0512015b2c475d4732d3a1b79d1a83110b0d102aea7d011412e0c86b8a4af058a1e995c8147244587732eaaae037b2d701b8d2fdbd9646c4da639dc293aa68ceb9ce1cbe19dd2b3f00243969a50299c9ec38198365600342d4944d99708ab4ec22dc5b4", @ANYRES16=r6, @ANYBLOB="00042bbd7000fbdbdf2510000000080001007063690011000200303030303a30303a31302e300000000008000b00040000000600110020000000080013004405000005001400010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00080000000600110008000000080013000200000005001400010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00ff010000060011004711000008001300ff00000005001400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0008000000060011000000000008001300650a00000500140001000000"], 0x110}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4) 16:06:24 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pnp0', 0xf2000, 0x10c) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140), 0x4) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000003c0)={0x100, 0x1, &(0x7f00000002c0)=[0x4], &(0x7f0000000300)=[0x5, 0xb9, 0x10000, 0xfff, 0x7, 0x50, 0x800, 0x5, 0x1], &(0x7f0000000340)=[0x5, 0x5], &(0x7f0000000380)=[0x4, 0x1f, 0x7, 0xfff], 0x0, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="aa764c4e6624b19587d752aa6817247ed628a9196f045973339303a5", 0x1c, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000240)={r2, 0xd1, &(0x7f0000000140)=""/209}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000003c0)={0x100, 0x1, &(0x7f00000002c0)=[0x4], &(0x7f0000000300)=[0x5, 0xb9, 0x10000, 0xfff, 0x7, 0x50, 0x800, 0x5, 0x1], &(0x7f0000000340)=[0x5, 0x5], &(0x7f0000000380)=[0x4, 0x1f, 0x7, 0xfff], 0x0, 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="aa764c4e6624b19587d752aa6817247ed628a9196f045973339303a5", 0x1c}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000240)={r2, 0xd1, &(0x7f0000000140)=""/209}) (async) 16:06:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000100)={0x10001, 0xa07b, 0x3, 0x4, 0x7, 0x46, 0x3}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200)={0x0, 0x5f, 0xc9, "43c0ff9c219aad38067be30460e3ba66f04d17dad5176da61d882137f3d5af53beb61360aeab527eb5a8e0bebeefc1f10dc980f4e2c5732914ffd328825fff866623439e764c300c5d23747ff0452036b1335836897496f9d42a64fd13e2c39289773d4555e683b4618f14ab540e4c01b790819eaa7e6bac5f73e1ef762eaa0ceb5b30e16bb216fe5a943155f3c21f6a0f7fbb2e13603c2f49096c16a82bbb0c3cec89a55104c7c9f58f93f65106a71dc0acf51924e7549631da77802f18a72bcce472040d611be182"}, 0xd1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff}, @in={0x2, 0x4e22, @private=0xa010102}], 0x2c) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x4, 0x2200) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000001c0)={0x0, 0x1}) 16:06:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x800, 0x10001, 0x8000, 0x0, 0x33, 0x0, 0x4, 0x8, 0x6, 0x4], 0xa, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x1, 0x0, '\x00', 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/printk', 0x10000, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000100)=0x63f) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000100)={0x10001, 0xa07b, 0x3, 0x4, 0x7, 0x46, 0x3}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200)={0x0, 0x5f, 0xc9, "43c0ff9c219aad38067be30460e3ba66f04d17dad5176da61d882137f3d5af53beb61360aeab527eb5a8e0bebeefc1f10dc980f4e2c5732914ffd328825fff866623439e764c300c5d23747ff0452036b1335836897496f9d42a64fd13e2c39289773d4555e683b4618f14ab540e4c01b790819eaa7e6bac5f73e1ef762eaa0ceb5b30e16bb216fe5a943155f3c21f6a0f7fbb2e13603c2f49096c16a82bbb0c3cec89a55104c7c9f58f93f65106a71dc0acf51924e7549631da77802f18a72bcce472040d611be182"}, 0xd1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff}, @in={0x2, 0x4e22, @private=0xa010102}], 0x2c) (async, rerun: 32) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x4, 0x2200) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000001c0)={0x0, 0x1}) 16:06:24 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x8008080}, 0xc8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x1d8, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x24004081}, 0x5) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x10000000, 0x26042) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="000000002e15123cdd028bfca710be754dca6864117798e253637c63489aca90e7c34066afa2d379896a2d2a299ff8a47ed0b8902833887b6b5860f8709599d3d9b46f9cabfb2361f09546fade762899642be7552c4add57f0512015b2c475d4732d3a1b79d1a83110b0d102aea7d011412e0c86b8a4af058a1e995c8147244587732eaaae037b2d701b8d2fdbd9646c4da639dc293aa68ceb9ce1cbe19dd2b3f00243969a50299c9ec38198365600342d4944d99708ab4ec22dc5b4", @ANYRES16=r6, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4) 16:06:24 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pnp0', 0xf2000, 0x10c) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140), 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pnp0', 0xf2000, 0x10c) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffffff, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140), 0x4) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) (async) 16:06:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x800, 0x10001, 0x8000, 0x0, 0x33, 0x0, 0x4, 0x8, 0x6, 0x4], 0xa, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x1, 0x0, '\x00', 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:24 executing program 3: syslog(0x3, &(0x7f0000000100)=""/144, 0x90) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) wait4(0x0, 0x0, 0x40000008, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x51e, 0xc88442) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000280)={0x2, 0x2, 0x9, 0x1f, 0x4, 0x6, 0x8, 0x4, 0x20}) 16:06:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/printk', 0x10000, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000100)=0x63f) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (rerun: 64) 16:06:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000100)={0x10001, 0xa07b, 0x3, 0x4, 0x7, 0x46, 0x3}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200)={0x0, 0x5f, 0xc9, "43c0ff9c219aad38067be30460e3ba66f04d17dad5176da61d882137f3d5af53beb61360aeab527eb5a8e0bebeefc1f10dc980f4e2c5732914ffd328825fff866623439e764c300c5d23747ff0452036b1335836897496f9d42a64fd13e2c39289773d4555e683b4618f14ab540e4c01b790819eaa7e6bac5f73e1ef762eaa0ceb5b30e16bb216fe5a943155f3c21f6a0f7fbb2e13603c2f49096c16a82bbb0c3cec89a55104c7c9f58f93f65106a71dc0acf51924e7549631da77802f18a72bcce472040d611be182"}, 0xd1) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff}, @in={0x2, 0x4e22, @private=0xa010102}], 0x2c) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x4, 0x2200) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000001c0)={0x0, 0x1}) 16:06:24 executing program 3: syslog(0x3, &(0x7f0000000100)=""/144, 0x90) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) wait4(0x0, 0x0, 0x40000008, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x51e, 0xc88442) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000280)={0x2, 0x2, 0x9, 0x1f, 0x4, 0x6, 0x8, 0x4, 0x20}) syslog(0x3, &(0x7f0000000100)=""/144, 0x90) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) wait4(0x0, 0x0, 0x40000008, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x51e, 0xc88442) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000280)={0x2, 0x2, 0x9, 0x1f, 0x4, 0x6, 0x8, 0x4, 0x20}) (async) 16:06:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x800, 0x10001, 0x8000, 0x0, 0x33, 0x0, 0x4, 0x8, 0x6, 0x4], 0xa, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x1, 0x0, '\x00', 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x800, 0x10001, 0x8000, 0x0, 0x33, 0x0, 0x4, 0x8, 0x6, 0x4], 0xa, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x1, 0x0, '\x00', 0x3, 0x5}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) 16:06:24 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x8008080}, 0xc8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x1d8, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x24004081}, 0x5) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x10000000, 0x26042) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="000000002e15123cdd028bfca710be754dca6864117798e253637c63489aca90e7c34066afa2d379896a2d2a299ff8a47ed0b8902833887b6b5860f8709599d3d9b46f9cabfb2361f09546fade762899642be7552c4add57f0512015b2c475d4732d3a1b79d1a83110b0d102aea7d011412e0c86b8a4af058a1e995c8147244587732eaaae037b2d701b8d2fdbd9646c4da639dc293aa68ceb9ce1cbe19dd2b3f00243969a50299c9ec38198365600342d4944d99708ab4ec22dc5b4", @ANYRES16=r6, @ANYBLOB="00042bbd7000fbdbdf2510000000080001007063690011000200303030303a30303a31302e300000000008000b00040000000600110020000000080013004405000005001400010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00080000000600110008000000080013000200000005001400010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00ff010000060011004711000008001300ff00000005001400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0008000000060011000000000008001300650a00000500140001000000"], 0x110}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4) 16:06:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000100)) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x8, 0x8b42, 0x9, 0x7fffffff], 0x4, 0x800, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000300)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, r3, r5, 0x0, 0x0, r6], 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x8, 0x1, 0x4}) 16:06:24 executing program 2: ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f00000000c0)=0x1) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000100)=0xfffffc01) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000200)=[0x4, 0x11e4, 0x0, 0x1, 0x1, 0xa0c, 0xd0, 0xfffffe01], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f00000001c0)) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) 16:06:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/printk', 0x10000, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000100)=0x63f) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:24 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffc, 0xa4000) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x100000, 0x6, 0x0, 0x4, 0x5}) 16:06:24 executing program 3: syslog(0x3, &(0x7f0000000100)=""/144, 0x90) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) wait4(0x0, 0x0, 0x40000008, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x51e, 0xc88442) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000280)={0x2, 0x2, 0x9, 0x1f, 0x4, 0x6, 0x8, 0x4, 0x20}) syslog(0x3, &(0x7f0000000100)=""/144, 0x90) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) wait4(0x0, 0x0, 0x40000008, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x51e, 0xc88442) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000280)={0x2, 0x2, 0x9, 0x1f, 0x4, 0x6, 0x8, 0x4, 0x20}) (async) 16:06:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x8, 0x8b42, 0x9, 0x7fffffff], 0x4, 0x800, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000300)={r4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, r3, r5, 0x0, 0x0, r6], 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x8, 0x1, 0x4}) 16:06:24 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000080)={0x0, 0x3f}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r0}) 16:06:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000100)) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x8, 0x8b42, 0x9, 0x7fffffff], 0x4, 0x800, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000300)={r4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, r3, r5, 0x0, 0x0, r6], 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x8, 0x1, 0x4}) 16:06:24 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000080)={0x0, 0x3f}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r0}) 16:06:24 executing program 2: ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f00000000c0)=0x1) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000100)=0xfffffc01) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000200)=[0x4, 0x11e4, 0x0, 0x1, 0x1, 0xa0c, 0xd0, 0xfffffe01], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) 16:06:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000040)={0xb4, &(0x7f0000000140)="8c39048dd32ebaee063235c1285381901a84022b4f4799bcf449fcf5c744c84d4f73a317efa2145b21c79153d4e3641046f849a4f0daff946a5be48421dfed393023ddb91a705f70d088fa5299eb0c44c86664f1abb5e9e1c5b8ee64af46684804b1660cd7a51c8857ae93a48b576128122e06445d74fcf5f522c26a13c78afd64455ab03ab7d82deb4a339747df94465a8ec86c693e218a66ca782d6b7935b4d3d446d6b47fa5e50eba3323a149602c4b83a128"}) 16:06:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) r3 = accept4$ax25(r2, &(0x7f0000000100)={{0x3, @default}, [@rose, @remote, @remote, @default, @netrom, @rose, @remote, @netrom]}, &(0x7f0000000000)=0x48, 0x80800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000001c0)={0x2}) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000000180)) 16:06:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x204200) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000140)={0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000)=0xdfb2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x1, 0x2], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000280)={0x43, &(0x7f0000000200)=""/67}) 16:06:24 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000080)={0x0, 0x3f}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r0}) 16:06:24 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffc, 0xa4000) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x100000, 0x6, 0x0, 0x4, 0x5}) 16:06:24 executing program 2: ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f00000000c0)=0x1) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000100)=0xfffffc01) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000200)=[0x4, 0x11e4, 0x0, 0x1, 0x1, 0xa0c, 0xd0, 0xfffffe01], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) 16:06:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000040)={0xb4, &(0x7f0000000140)="8c39048dd32ebaee063235c1285381901a84022b4f4799bcf449fcf5c744c84d4f73a317efa2145b21c79153d4e3641046f849a4f0daff946a5be48421dfed393023ddb91a705f70d088fa5299eb0c44c86664f1abb5e9e1c5b8ee64af46684804b1660cd7a51c8857ae93a48b576128122e06445d74fcf5f522c26a13c78afd64455ab03ab7d82deb4a339747df94465a8ec86c693e218a66ca782d6b7935b4d3d446d6b47fa5e50eba3323a149602c4b83a128"}) 16:06:24 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffc, 0xa4000) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x100000, 0x6, 0x0, 0x4, 0x5}) 16:06:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) (async) r3 = accept4$ax25(r2, &(0x7f0000000100)={{0x3, @default}, [@rose, @remote, @remote, @default, @netrom, @rose, @remote, @netrom]}, &(0x7f0000000000)=0x48, 0x80800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000001c0)={0x2}) (async, rerun: 32) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000000180)) (rerun: 32) 16:06:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x2080) 16:06:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x204200) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000140)={0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000)=0xdfb2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x1, 0x2], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000280)={0x43, &(0x7f0000000200)=""/67}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x204200) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000140)={0x1}) (async) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000)=0xdfb2) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x1, 0x2], 0x2, 0x800}) (async) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000280)={0x43, &(0x7f0000000200)=""/67}) (async) 16:06:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000040)={0xb4, &(0x7f0000000140)="8c39048dd32ebaee063235c1285381901a84022b4f4799bcf449fcf5c744c84d4f73a317efa2145b21c79153d4e3641046f849a4f0daff946a5be48421dfed393023ddb91a705f70d088fa5299eb0c44c86664f1abb5e9e1c5b8ee64af46684804b1660cd7a51c8857ae93a48b576128122e06445d74fcf5f522c26a13c78afd64455ab03ab7d82deb4a339747df94465a8ec86c693e218a66ca782d6b7935b4d3d446d6b47fa5e50eba3323a149602c4b83a128"}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000040)={0xb4, &(0x7f0000000140)="8c39048dd32ebaee063235c1285381901a84022b4f4799bcf449fcf5c744c84d4f73a317efa2145b21c79153d4e3641046f849a4f0daff946a5be48421dfed393023ddb91a705f70d088fa5299eb0c44c86664f1abb5e9e1c5b8ee64af46684804b1660cd7a51c8857ae93a48b576128122e06445d74fcf5f522c26a13c78afd64455ab03ab7d82deb4a339747df94465a8ec86c693e218a66ca782d6b7935b4d3d446d6b47fa5e50eba3323a149602c4b83a128"}) (async) 16:06:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) 16:06:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x1, 0x8, 0xa, 0x3}) 16:06:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) (async) r3 = accept4$ax25(r2, &(0x7f0000000100)={{0x3, @default}, [@rose, @remote, @remote, @default, @netrom, @rose, @remote, @netrom]}, &(0x7f0000000000)=0x48, 0x80800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000001c0)={0x2}) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000000180)) 16:06:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x2080) (rerun: 32) 16:06:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) 16:06:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x1, 0x8, 0xa, 0x3}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x1, 0x8, 0xa, 0x3}) (async) 16:06:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x204200) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000140)={0x1}) (async) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000)=0xdfb2) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x1, 0x2], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000280)={0x43, &(0x7f0000000200)=""/67}) 16:06:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="44090000128a87897f68971413a55300047bb361a4be218b90a6896270cdadb11a908b9bcd510a3de22f9349f12eb052736c3bd03551c7c6bba84a1d8de18cb55bdfd0c8985f60c54ffe19740b0cba78977b1c56bedd67fb7af62106953c9dd89dcbdcece1e70af13bfd7952c1260c6b413cf55e63777d44a9", @ANYRES16=r2, @ANYBLOB="000227bd7000fbdbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00a88c00000600110004000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004090) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r3}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x5, 0x89, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000240)=0x7ff) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000100)="b3aa5f0f0e0963c8bac25894aa976b531a9baf85b7c5c6c1e8dcd93baa6370976289f7c5aa443c6c754d44e6d79a86a83733df88dbd6ec0469e2ee735dad8271396a3cfe9c8521f238914506e1412a8efd3092586abd5c0670ad373caf6a7036c0", 0x61}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000180)={0x1, 0x7ff00}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pnp', 0x8800, 0x34) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f00000002c0)={0x1, 0x7, 0x80000001, 0x3, 0x1f, 0x2, 0x1, 0x3ff, 0x1}) 16:06:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) 16:06:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x2080) 16:06:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="44090000128a87897f68971413a55300047bb361a4be218b90a6896270cdadb11a908b9bcd510a3de22f9349f12eb052736c3bd03551c7c6bba84a1d8de18cb55bdfd0c8985f60c54ffe19740b0cba78977b1c56bedd67fb7af62106953c9dd89dcbdcece1e70af13bfd7952c1260c6b413cf55e63777d44a9", @ANYRES16=r2, @ANYBLOB="000227bd7000fbdbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00a88c00000600110004000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004090) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r3}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x1, 0x8, 0xa, 0x3}) 16:06:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nvme', 0x220240, 0x1b1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x2, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) 16:06:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x5, 0x89, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000240)=0x7ff) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000100)="b3aa5f0f0e0963c8bac25894aa976b531a9baf85b7c5c6c1e8dcd93baa6370976289f7c5aa443c6c754d44e6d79a86a83733df88dbd6ec0469e2ee735dad8271396a3cfe9c8521f238914506e1412a8efd3092586abd5c0670ad373caf6a7036c0", 0x61}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000180)={0x1, 0x7ff00}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pnp', 0x8800, 0x34) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f00000002c0)={0x1, 0x7, 0x80000001, 0x3, 0x1f, 0x2, 0x1, 0x3ff, 0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x5, 0x89}) (async) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000240)=0x7ff) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000100)="b3aa5f0f0e0963c8bac25894aa976b531a9baf85b7c5c6c1e8dcd93baa6370976289f7c5aa443c6c754d44e6d79a86a83733df88dbd6ec0469e2ee735dad8271396a3cfe9c8521f238914506e1412a8efd3092586abd5c0670ad373caf6a7036c0", 0x61}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000180)={0x1, 0x7ff00}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pnp', 0x8800, 0x34) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f00000002c0)={0x1, 0x7, 0x80000001, 0x3, 0x1f, 0x2, 0x1, 0x3ff, 0x1}) (async) 16:06:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="44090000128a87897f68971413a55300047bb361a4be218b90a6896270cdadb11a908b9bcd510a3de22f9349f12eb052736c3bd03551c7c6bba84a1d8de18cb55bdfd0c8985f60c54ffe19740b0cba78977b1c56bedd67fb7af62106953c9dd89dcbdcece1e70af13bfd7952c1260c6b413cf55e63777d44a9", @ANYRES16=r2, @ANYBLOB="000227bd7000fbdbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00a88c00000600110004000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004090) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r3}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="44090000128a87897f68971413a55300047bb361a4be218b90a6896270cdadb11a908b9bcd510a3de22f9349f12eb052736c3bd03551c7c6bba84a1d8de18cb55bdfd0c8985f60c54ffe19740b0cba78977b1c56bedd67fb7af62106953c9dd89dcbdcece1e70af13bfd7952c1260c6b413cf55e63777d44a9", @ANYRES16=r2, @ANYBLOB="000227bd7000fbdbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00a88c00000600110004000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004090) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r3}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) 16:06:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000100)) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000000)={r3, 0x1a}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x2, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x2, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) (async) 16:06:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nvme', 0x220240, 0x1b1) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x5, 0x89, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000240)=0x7ff) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000100)="b3aa5f0f0e0963c8bac25894aa976b531a9baf85b7c5c6c1e8dcd93baa6370976289f7c5aa443c6c754d44e6d79a86a83733df88dbd6ec0469e2ee735dad8271396a3cfe9c8521f238914506e1412a8efd3092586abd5c0670ad373caf6a7036c0", 0x61}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000180)={0x1, 0x7ff00}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pnp', 0x8800, 0x34) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f00000002c0)={0x1, 0x7, 0x80000001, 0x3, 0x1f, 0x2, 0x1, 0x3ff, 0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x5, 0x89}) (async) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000240)=0x7ff) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000100)="b3aa5f0f0e0963c8bac25894aa976b531a9baf85b7c5c6c1e8dcd93baa6370976289f7c5aa443c6c754d44e6d79a86a83733df88dbd6ec0469e2ee735dad8271396a3cfe9c8521f238914506e1412a8efd3092586abd5c0670ad373caf6a7036c0", 0x61}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000180)={0x1, 0x7ff00}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pnp', 0x8800, 0x34) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f00000002c0)={0x1, 0x7, 0x80000001, 0x3, 0x1f, 0x2, 0x1, 0x3ff, 0x1}) (async) 16:06:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x2, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) 16:06:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000000c0)=""/239) 16:06:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000000)={r3, 0x1a}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:24 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x9}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000180)={0x1dd, 0x3, 0x3, 0xa, &(0x7f0000000100)=[{0x4, 0x401, 0x39ea, 0x7}, {0x101, 0x63, 0x8, 0x3}, {0x18, 0x8, 0x4, 0x8}, {0x1, 0x1, 0x7}, {0x100, 0x0, 0x7, 0x3}, {0x280, 0x1, 0x7ff, 0x7f}, {0x8000, 0xe4, 0x6, 0x9}, {0x200, 0x81, 0x100, 0x3}, {0x200, 0x1, 0x7, 0x1f}, {0x3, 0x1, 0x4, 0x8001}]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f00000000c0)={0xffff, 0x1, 0xff, 0x2, &(0x7f0000000080)=[{0x1ff, 0x200, 0x6548, 0x9}, {0x5, 0x0, 0x6368, 0x809f}]}) 16:06:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000000c0)=""/239) 16:06:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nvme', 0x220240, 0x1b1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nvme', 0x220240, 0x1b1) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000180)=""/170) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x2}) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 32) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000000)={r3, 0x1a}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (rerun: 64) 16:06:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 64) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000000c0)=""/239) 16:06:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x648083) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0xfffffffb, 0x9, 0x9, 0x81], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x6, 0x1000, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:24 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x9}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000180)={0x1dd, 0x3, 0x3, 0xa, &(0x7f0000000100)=[{0x4, 0x401, 0x39ea, 0x7}, {0x101, 0x63, 0x8, 0x3}, {0x18, 0x8, 0x4, 0x8}, {0x1, 0x1, 0x7}, {0x100, 0x0, 0x7, 0x3}, {0x280, 0x1, 0x7ff, 0x7f}, {0x8000, 0xe4, 0x6, 0x9}, {0x200, 0x81, 0x100, 0x3}, {0x200, 0x1, 0x7, 0x1f}, {0x3, 0x1, 0x4, 0x8001}]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f00000000c0)={0xffff, 0x1, 0xff, 0x2, &(0x7f0000000080)=[{0x1ff, 0x200, 0x6548, 0x9}, {0x5, 0x0, 0x6368, 0x809f}]}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x9}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000180)={0x1dd, 0x3, 0x3, 0xa, &(0x7f0000000100)=[{0x4, 0x401, 0x39ea, 0x7}, {0x101, 0x63, 0x8, 0x3}, {0x18, 0x8, 0x4, 0x8}, {0x1, 0x1, 0x7}, {0x100, 0x0, 0x7, 0x3}, {0x280, 0x1, 0x7ff, 0x7f}, {0x8000, 0xe4, 0x6, 0x9}, {0x200, 0x81, 0x100, 0x3}, {0x200, 0x1, 0x7, 0x1f}, {0x3, 0x1, 0x4, 0x8001}]}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f00000000c0)={0xffff, 0x1, 0xff, 0x2, &(0x7f0000000080)=[{0x1ff, 0x200, 0x6548, 0x9}, {0x5, 0x0, 0x6368, 0x809f}]}) (async) 16:06:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x648083) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0xfffffffb, 0x9, 0x9, 0x81], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x6, 0x1000, 0x8, 0x0, 0x0}) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000140)={"013d2c2bbdc060cf6affe2536fe80006eae8002bceeb48d3cb99fd83912a0090", r4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x3, 0x9, 0x4, 0x0, 0x8000}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000040)={0x68}) 16:06:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000180)=""/170) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000180)=""/170) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) 16:06:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x8100) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000100)={{0x7, 0x19}, {0x76be, 0x2}, 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1000001, 0x0, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000000)={0x0, 0x42c5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:24 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x9}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000180)={0x1dd, 0x3, 0x3, 0xa, &(0x7f0000000100)=[{0x4, 0x401, 0x39ea, 0x7}, {0x101, 0x63, 0x8, 0x3}, {0x18, 0x8, 0x4, 0x8}, {0x1, 0x1, 0x7}, {0x100, 0x0, 0x7, 0x3}, {0x280, 0x1, 0x7ff, 0x7f}, {0x8000, 0xe4, 0x6, 0x9}, {0x200, 0x81, 0x100, 0x3}, {0x200, 0x1, 0x7, 0x1f}, {0x3, 0x1, 0x4, 0x8001}]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f00000000c0)={0xffff, 0x1, 0xff, 0x2, &(0x7f0000000080)=[{0x1ff, 0x200, 0x6548, 0x9}, {0x5, 0x0, 0x6368, 0x809f}]}) 16:06:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) (async, rerun: 64) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (rerun: 64) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000140)={"013d2c2bbdc060cf6affe2536fe80006eae8002bceeb48d3cb99fd83912a0090", r4}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x3, 0x9, 0x4, 0x0, 0x8000}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r4}) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000040)={0x68}) 16:06:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x648083) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0xfffffffb, 0x9, 0x9, 0x81], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x6, 0x1000, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x648083) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0xfffffffb, 0x9, 0x9, 0x81], 0x4, 0x80800}) (async) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x6, 0x1000, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 16:06:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000100)={{0x7, 0x19}, {0x76be, 0x2}, 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1000001, 0x0, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000000)={0x0, 0x42c5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000100)={{0x7, 0x19}, {0x76be, 0x2}, 0x5, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1000001, 0x0, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000000)={0x0, 0x42c5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x8100) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000180)=""/170) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000180)=""/170) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) 16:06:24 executing program 1: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x80ca], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x1}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x9, 0x4) 16:06:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x8, 0x0, 0x10000, 0x0, 0x20, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000240)={0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/usbcore', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0xc4080) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x2}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r5, 0xc00464af, &(0x7f0000000280)=0x7) r6 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000300)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r6, 0xc02864ca, &(0x7f00000003c0)={&(0x7f0000000340)=[0x0, 0x0, r7], &(0x7f0000000380)=[0xffffffffffffffff, 0x9, 0x2, 0x2, 0x2], 0x40, 0x3, 0x2}) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x4, @empty, 0x1}}}, 0x84) 16:06:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x8100) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:24 executing program 1: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x80ca], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x1}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x9, 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x80ca], 0x1, 0x80000}) (async) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x1}) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x9, 0x4) (async) 16:06:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000100)={{0x7, 0x19}, {0x76be, 0x2}, 0x5, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1000001, 0x0, 0x6, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000000)={0x0, 0x42c5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000140)={"013d2c2bbdc060cf6affe2536fe80006eae8002bceeb48d3cb99fd83912a0090", r4}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x3, 0x9, 0x4, 0x0, 0x8000}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000040)={0x68}) 16:06:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000100)={0x52, 0x1, 0x0, 0x6, &(0x7f00000000c0)=[{0x101, 0x5, 0x6, 0xffff}, {0x6, 0x8, 0x94ad, 0x9}, {0x6, 0x3, 0x7f, 0x6}, {0x101, 0x0, 0x0, 0x5}, {0x40, 0x2, 0x800, 0x2}, {0x4, 0x3ff, 0x9, 0x1fa}]}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000000)={0x0, 0x12}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000000)={0x0, 0x12}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x8, 0x0, 0x10000, 0x0, 0x20, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000240)={0x9}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/usbcore', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0xc4080) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x2}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_RMFB(r5, 0xc00464af, &(0x7f0000000280)=0x7) (async) r6 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000300)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r6, 0xc02864ca, &(0x7f00000003c0)={&(0x7f0000000340)=[0x0, 0x0, r7], &(0x7f0000000380)=[0xffffffffffffffff, 0x9, 0x2, 0x2, 0x2], 0x40, 0x3, 0x2}) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x4, @empty, 0x1}}}, 0x84) 16:06:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x4a000) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={r1, 0x1}) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) 16:06:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000100)={0x52, 0x1, 0x0, 0x6, &(0x7f00000000c0)=[{0x101, 0x5, 0x6, 0xffff}, {0x6, 0x8, 0x94ad, 0x9}, {0x6, 0x3, 0x7f, 0x6}, {0x101, 0x0, 0x0, 0x5}, {0x40, 0x2, 0x800, 0x2}, {0x4, 0x3ff, 0x9, 0x1fa}]}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:25 executing program 1: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x80ca], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x1}) (async, rerun: 32) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x9, 0x4) (rerun: 32) 16:06:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000140)={r3, 0x1}) 16:06:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x8, 0x0, 0x10000, 0x0, 0x20, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000240)={0x9}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/usbcore', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0xc4080) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x2}) (async, rerun: 32) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 32) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_RMFB(r5, 0xc00464af, &(0x7f0000000280)=0x7) r6 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000300)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r6, 0xc02864ca, &(0x7f00000003c0)={&(0x7f0000000340)=[0x0, 0x0, r7], &(0x7f0000000380)=[0xffffffffffffffff, 0x9, 0x2, 0x2, 0x2], 0x40, 0x3, 0x2}) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x4, @empty, 0x1}}}, 0x84) (rerun: 32) 16:06:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000100)={0x52, 0x1, 0x0, 0x6, &(0x7f00000000c0)=[{0x101, 0x5, 0x6, 0xffff}, {0x6, 0x8, 0x94ad, 0x9}, {0x6, 0x3, 0x7f, 0x6}, {0x101, 0x0, 0x0, 0x5}, {0x40, 0x2, 0x800, 0x2}, {0x4, 0x3ff, 0x9, 0x1fa}]}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000100)={0x52, 0x1, 0x0, 0x6, &(0x7f00000000c0)=[{0x101, 0x5, 0x6, 0xffff}, {0x6, 0x8, 0x94ad, 0x9}, {0x6, 0x3, 0x7f, 0x6}, {0x101, 0x0, 0x0, 0x5}, {0x40, 0x2, 0x800, 0x2}, {0x4, 0x3ff, 0x9, 0x1fa}]}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) 16:06:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x4a000) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={r1, 0x1}) (async) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) 16:06:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000100)=0x2) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000040)={@any, 0x101}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x7d3481) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000080)) 16:06:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000000)={0x0, 0x12}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000140)={r3, 0x1}) 16:06:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x4a000) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={r1, 0x1}) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x4a000) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={r1, 0x1}) (async) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) (async) 16:06:25 executing program 2: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f00000003c0)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000040)={0x1000, 0x6, 0xff, 0xf0, &(0x7f0000000180)=""/240, 0x98, &(0x7f0000000280)=""/152, 0x77, &(0x7f0000000340)=""/119}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0xd, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f00000000c0)=""/89}) 16:06:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000100)=0x2) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000040)={@any, 0x101}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x7d3481) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000100)=0x2) (async) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000040)={@any, 0x101}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x7d3481) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000080)) (async) 16:06:25 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000100)=0xc) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) 16:06:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000140)={r3, 0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{}]}) (async) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000140)={r3, 0x1}) (async) 16:06:25 executing program 4: setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x9, @mcast2, 0x7}, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc74}, @in6={0xa, 0x4e24, 0x582, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}], 0x54) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0xfffffffb, 0x3, 0x8, 0x4a8c1c4f, 0x240, 0x7, 0x1, 0x5], 0x8, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000000)) 16:06:25 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000100)=0xc) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) 16:06:25 executing program 2: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f00000003c0)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000040)={0x1000, 0x6, 0xff, 0xf0, &(0x7f0000000180)=""/240, 0x98, &(0x7f0000000280)=""/152, 0x77, &(0x7f0000000340)=""/119}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0xd, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f00000000c0)=""/89}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f00000003c0)) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x0) (async) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000040)={0x1000, 0x6, 0xff, 0xf0, &(0x7f0000000180)=""/240, 0x98, &(0x7f0000000280)=""/152, 0x77, &(0x7f0000000340)=""/119}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0xd, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f00000000c0)=""/89}) (async) 16:06:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x80003, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000180)={&(0x7f00000001c0)=[r2, r3, r4, r3, r4, r3, r2], &(0x7f0000000140), 0x7}) 16:06:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000100)=0x2) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000040)={@any, 0x101}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x7d3481) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000100)=0x2) (async) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000040)={@any, 0x101}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x7d3481) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000080)) (async) 16:06:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={0x0, 0x80000000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:25 executing program 4: setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x9, @mcast2, 0x7}, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc74}, @in6={0xa, 0x4e24, 0x582, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}], 0x54) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0xfffffffb, 0x3, 0x8, 0x4a8c1c4f, 0x240, 0x7, 0x1, 0x5], 0x8, 0x0, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000000)) 16:06:25 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000100)=0xc) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) 16:06:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={0x0, 0x80000000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={0x0, 0x80000000}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:25 executing program 2: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f00000003c0)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x0) (rerun: 64) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000040)={0x1000, 0x6, 0xff, 0xf0, &(0x7f0000000180)=""/240, 0x98, &(0x7f0000000280)=""/152, 0x77, &(0x7f0000000340)=""/119}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0xd, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f00000000c0)=""/89}) 16:06:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x80003, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000180)={&(0x7f00000001c0)=[r2, r3, r4, r3, r4, r3, r2], &(0x7f0000000140), 0x7}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x80003, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000180)={&(0x7f00000001c0)=[r2, r3, r4, r3, r4, r3, r2], &(0x7f0000000140), 0x7}) (async) 16:06:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x7, 0x5, 0x200, 0xfffffffc], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r1}) 16:06:25 executing program 4: setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x9, @mcast2, 0x7}, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc74}, @in6={0xa, 0x4e24, 0x582, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}], 0x54) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0xfffffffb, 0x3, 0x8, 0x4a8c1c4f, 0x240, 0x7, 0x1, 0x5], 0x8, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000000)) 16:06:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x4040) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000100)={0x6, 0x6, 0x8001, 0x3, 0x2, 0x4, 0x7}) 16:06:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x10000) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x7, 0x5, 0x200, 0xfffffffc], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x7, 0x5, 0x200, 0xfffffffc], 0x4}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r1}) (async) 16:06:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={0x0, 0x80000000}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (rerun: 32) 16:06:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x80003, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000180)={&(0x7f00000001c0)=[r2, r3, r4, r3, r4, r3, r2], &(0x7f0000000140), 0x7}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x80003, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000180)={&(0x7f00000001c0)=[r2, r3, r4, r3, r4, r3, r2], &(0x7f0000000140), 0x7}) (async) 16:06:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x10000) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async, rerun: 64) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (rerun: 64) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x7, 0x5, 0x200, 0xfffffffc], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x7, 0x5, 0x200, 0xfffffffc], 0x4}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r1}) (async) 16:06:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x40, 0x109040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x420002) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r2}) 16:06:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x4040) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000100)={0x6, 0x6, 0x8001, 0x3, 0x2, 0x4, 0x7}) 16:06:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x80040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x507000) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2400000, 0x400000) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x9, 0x1f9000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x8, 0x5000) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000100)) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000200)={r4, 0x50}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x8000000000000000, 0x30841) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r5, 0x80386433, &(0x7f0000000240)=""/218) 16:06:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x507000) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2400000, 0x400000) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) (async) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x9, 0x1f9000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x8, 0x5000) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000200)={r4, 0x50}) (async) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x8000000000000000, 0x30841) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r5, 0x80386433, &(0x7f0000000240)=""/218) 16:06:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x40, 0x109040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x420002) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000140)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r2}) (rerun: 64) 16:06:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x10000) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x80040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x80040) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x4040) (rerun: 32) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000100)={0x6, 0x6, 0x8001, 0x3, 0x2, 0x4, 0x7}) 16:06:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x40, 0x109040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x420002) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r2}) 16:06:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x507000) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2400000, 0x400000) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x9, 0x1f9000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x8, 0x5000) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000100)) (async, rerun: 64) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000001c0)={0x0}) (rerun: 64) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000200)={r4, 0x50}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x8000000000000000, 0x30841) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_INFO(r5, 0x80386433, &(0x7f0000000240)=""/218) 16:06:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3875, 0x3038c2) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000040)) 16:06:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x80040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x80040) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:25 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) 16:06:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3875, 0x3038c2) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000040)) 16:06:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x101800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x6}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x448481) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000240)={0xa, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000140)={0x13}) 16:06:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:25 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) 16:06:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000000)=0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x7ff, 0xc1, 0x206, 0x1c166ed0, 0x40, 0x6, 0x5, 0x9}, &(0x7f0000000140)=0x20) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000180)={0x9, 0x6, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x200}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{}, {}]}) 16:06:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x101800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x6}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x448481) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000240)={0xa, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000140)={0x13}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x101800) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x6}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x448481) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000240)={0xa, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000140)={0x13}) (async) 16:06:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3875, 0x3038c2) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000040)) 16:06:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:25 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) 16:06:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000000)=0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x7ff, 0xc1, 0x206, 0x1c166ed0, 0x40, 0x6, 0x5, 0x9}, &(0x7f0000000140)=0x20) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, &(0x7f0000000000)=""/85}) 16:06:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x101800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x6}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x448481) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000240)={0xa, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000140)={0x13}) 16:06:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000000)=0x1) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x7ff, 0xc1, 0x206, 0x1c166ed0, 0x40, 0x6, 0x5, 0x9}, &(0x7f0000000140)=0x20) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000180)={0x9, 0x6, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x200}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000140)={r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{}, {}]}) 16:06:25 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x1, 0x3, 0xba3d}) 16:06:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0xfffffff9, 0x0, 0x0, 0x5, 0x8, 0x40000000, 0x1}) 16:06:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffff, 0x0) (rerun: 32) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000180)={0x9, 0x6, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x200}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000140)={r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{}, {}]}) 16:06:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0xfffffff9, 0x0, 0x0, 0x5, 0x8, 0x40000000, 0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0xfffffff9, 0x0, 0x0, 0x5, 0x8, 0x40000000, 0x1}) (async) 16:06:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, &(0x7f0000000000)=""/85}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, &(0x7f0000000000)=""/85}) (async) 16:06:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x9903, 0x2, 0xa}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:25 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x1, 0x3, 0xba3d}) 16:06:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0xfffffff9, 0x0, 0x0, 0x5, 0x8, 0x40000000, 0x1}) 16:06:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, &(0x7f0000000000)=""/85}) 16:06:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x200, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3a3054e3", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf254d0000000f00a8007365636f6e646e616d6500000800030003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) 16:06:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x9903, 0x2, 0xa}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) syz_open_dev$dri(&(0x7f0000000100), 0x70000000, 0x88880) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) socketpair(0x11, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x8, 0x4, 0x4, 0x3, 0x8, 0xfffffde8, 0xffff], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc02864ca, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x7, 0x6, 0x8001, 0x101, 0xffffffffffffffff], 0x98b6, 0x4, 0x3}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f00000001c0)={0x8001, 0x2, 0x8, 0x3f, 0x1f}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000200)={0x0, 0x5ce934c6712c2f7f, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000140)={0x2, 0x5, 0x9, 0x84, 0xa, 0x4, 0xfffffff8, 0x0, 0x5}) 16:06:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x200, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3a3054e3", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf254d0000000f00a8007365636f6e646e616d6500000800030003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x200, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3a3054e3", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf254d0000000f00a8007365636f6e646e616d6500000800030003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) (async) 16:06:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) syz_open_dev$dri(&(0x7f0000000100), 0x70000000, 0x88880) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) socketpair(0x11, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x8, 0x4, 0x4, 0x3, 0x8, 0xfffffde8, 0xffff], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc02864ca, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x7, 0x6, 0x8001, 0x101, 0xffffffffffffffff], 0x98b6, 0x4, 0x3}) (async, rerun: 64) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000000c0)={r4}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f00000001c0)={0x8001, 0x2, 0x8, 0x3f, 0x1f}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000200)={0x0, 0x5ce934c6712c2f7f, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000140)={0x2, 0x5, 0x9, 0x84, 0xa, 0x4, 0xfffffff8, 0x0, 0x5}) 16:06:25 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100)=0x80000000, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, &(0x7f0000000180)=""/91}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000200), 0xf12, 0x1c0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000040)={0x6, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f00000000c0)={0x0, r5}) 16:06:25 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x1, 0x3, 0xba3d}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x1, 0x3, 0xba3d}) (async) 16:06:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x1001) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000240)={'\x00', 0x3, 0x3, 0x80000000}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000200)={0x6, 0x0, 0x10000}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x7fff, 0xffffffff, 0x0, 0x1009, 0x1000, 0x0, 0x6}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={0x1, 0x8e, &(0x7f00000000c0)=""/142}) 16:06:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x9903, 0x2, 0xa}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:25 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100)=0x80000000, 0x4) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, &(0x7f0000000180)=""/91}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) (async) r4 = syz_open_dev$dri(&(0x7f0000000200), 0xf12, 0x1c0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000040)={0x6, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f00000000c0)={0x0, r5}) 16:06:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x1001) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000240)={'\x00', 0x3, 0x3, 0x80000000}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) (async) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000200)={0x6, 0x0, 0x10000}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x7fff, 0xffffffff, 0x0, 0x1009, 0x1000, 0x0, 0x6}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={0x1, 0x8e, &(0x7f00000000c0)=""/142}) 16:06:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x200, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3a3054e3", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf254d0000000f00a8007365636f6e646e616d6500000800030003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) 16:06:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x80000000, 0x18041) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x81, 0x221802) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) syz_open_dev$dri(&(0x7f0000000100), 0x70000000, 0x88880) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) socketpair(0x11, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x8, 0x4, 0x4, 0x3, 0x8, 0xfffffde8, 0xffff], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc02864ca, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x7, 0x6, 0x8001, 0x101, 0xffffffffffffffff], 0x98b6, 0x4, 0x3}) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000000c0)={r4}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f00000001c0)={0x8001, 0x2, 0x8, 0x3f, 0x1f}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000200)={0x0, 0x5ce934c6712c2f7f, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000140)={0x2, 0x5, 0x9, 0x84, 0xa, 0x4, 0xfffffff8, 0x0, 0x5}) 16:06:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x80000000, 0x18041) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x81, 0x221802) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000080), 0x80000000, 0x18041) (async) syz_open_dev$dri(&(0x7f0000000000), 0x81, 0x221802) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) 16:06:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x101800) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc7, 0x37, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 16:06:25 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100)=0x80000000, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, &(0x7f0000000180)=""/91}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000200), 0xf12, 0x1c0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r0}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000040)={0x6, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f00000000c0)={0x0, r5}) 16:06:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x1001) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000240)={'\x00', 0x3, 0x3, 0x80000000}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000200)={0x6, 0x0, 0x10000}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x7fff, 0xffffffff, 0x0, 0x1009, 0x1000, 0x0, 0x6}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={0x1, 0x8e, &(0x7f00000000c0)=""/142}) 16:06:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)="82f94e5682c75ffbf4962e90b873a4abb4ab33b720d3158ced3a45e3164d44020db4b5a095dbac6b5623fae113503bb64d6ca9d6b44cad54cdf5a7d8ef0a5ac157f0dcbcd3255d8aa5d40c9f9c33aa630602f699bafd03cf040db3c772bfc1ad67f93f9990fdf45eca3e8225a0f1b581deb4d6a1a83eaedad5fd08542dc005a4ce30e61ccb00b1dc4b1d6440f4b282b3241b35b3d7f08b8745b84d4750d688e4967092712200ffc01d0478d6c5a15891e3d8581ace6cbaeb8d56640ecdfed143097eb85a179a5bae0668347404ec68d464677df8e53cf6140ed0bb76b9435c7ee0a73fc22ba8a589c416e5af1f2a216c763f", 0xf2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:25 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) 16:06:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x80000000, 0x18041) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x81, 0x221802) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000080), 0x80000000, 0x18041) (async) syz_open_dev$dri(&(0x7f0000000000), 0x81, 0x221802) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) 16:06:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)="82f94e5682c75ffbf4962e90b873a4abb4ab33b720d3158ced3a45e3164d44020db4b5a095dbac6b5623fae113503bb64d6ca9d6b44cad54cdf5a7d8ef0a5ac157f0dcbcd3255d8aa5d40c9f9c33aa630602f699bafd03cf040db3c772bfc1ad67f93f9990fdf45eca3e8225a0f1b581deb4d6a1a83eaedad5fd08542dc005a4ce30e61ccb00b1dc4b1d6440f4b282b3241b35b3d7f08b8745b84d4750d688e4967092712200ffc01d0478d6c5a15891e3d8581ace6cbaeb8d56640ecdfed143097eb85a179a5bae0668347404ec68d464677df8e53cf6140ed0bb76b9435c7ee0a73fc22ba8a589c416e5af1f2a216c763f", 0xf2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)="82f94e5682c75ffbf4962e90b873a4abb4ab33b720d3158ced3a45e3164d44020db4b5a095dbac6b5623fae113503bb64d6ca9d6b44cad54cdf5a7d8ef0a5ac157f0dcbcd3255d8aa5d40c9f9c33aa630602f699bafd03cf040db3c772bfc1ad67f93f9990fdf45eca3e8225a0f1b581deb4d6a1a83eaedad5fd08542dc005a4ce30e61ccb00b1dc4b1d6440f4b282b3241b35b3d7f08b8745b84d4750d688e4967092712200ffc01d0478d6c5a15891e3d8581ace6cbaeb8d56640ecdfed143097eb85a179a5bae0668347404ec68d464677df8e53cf6140ed0bb76b9435c7ee0a73fc22ba8a589c416e5af1f2a216c763f", 0xf2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) 16:06:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x101800) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc7, 0x37, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 16:06:26 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x5], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000740)) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000180)=0x1) r1 = syz_open_dev$dri(&(0x7f0000000700), 0xffffffffffffffff, 0x80100) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000440)={0xf639, 0x0, 0x10001}) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x125400, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x1, 0x7fffffff, 0x5, 0x8], 0x4}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)={0x0, 0x6b, 0xab, "3a33cc555feb542ba6761dda6839f52e032ed8a51fc43d981055bdd7198a29606656695591a236e6148bee707fccf04d86468250b2c79366dba4541214f1b19d571bbcd91cc26600554fa8978ad604a10ad3edd80f98d8e7ad48b0e0397a87e1c3b5f027a3cb1497777a36731c9ae2f6876793511965ea8e56a5504698c5877c52533038f89c40bf57530cb4ee63b228e055cefeef0b90755d44adc513f20f138859a605a623651fb25165"}, 0xb3) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000100)) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000200)=0x6) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000002c0)={0x0, 0x2}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4e, &(0x7f0000000000)=""/78}) socketpair(0x29, 0x3, 0x80000000, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1401}, 0xc, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYBLOB="779dadfe1cbd00010011", @ANYRES16=0x0, @ANYBLOB="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"], 0xffffffffffffffdf}}, 0x80) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000300)={0x4, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f0000000340)={0x9313000000000000, r5}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4) 16:06:26 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) 16:06:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) (rerun: 64) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)="82f94e5682c75ffbf4962e90b873a4abb4ab33b720d3158ced3a45e3164d44020db4b5a095dbac6b5623fae113503bb64d6ca9d6b44cad54cdf5a7d8ef0a5ac157f0dcbcd3255d8aa5d40c9f9c33aa630602f699bafd03cf040db3c772bfc1ad67f93f9990fdf45eca3e8225a0f1b581deb4d6a1a83eaedad5fd08542dc005a4ce30e61ccb00b1dc4b1d6440f4b282b3241b35b3d7f08b8745b84d4750d688e4967092712200ffc01d0478d6c5a15891e3d8581ace6cbaeb8d56640ecdfed143097eb85a179a5bae0668347404ec68d464677df8e53cf6140ed0bb76b9435c7ee0a73fc22ba8a589c416e5af1f2a216c763f", 0xf2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:26 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x5], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000740)) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000180)=0x1) r1 = syz_open_dev$dri(&(0x7f0000000700), 0xffffffffffffffff, 0x80100) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000440)={0xf639, 0x0, 0x10001}) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x125400, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x1, 0x7fffffff, 0x5, 0x8], 0x4}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)={0x0, 0x6b, 0xab, "3a33cc555feb542ba6761dda6839f52e032ed8a51fc43d981055bdd7198a29606656695591a236e6148bee707fccf04d86468250b2c79366dba4541214f1b19d571bbcd91cc26600554fa8978ad604a10ad3edd80f98d8e7ad48b0e0397a87e1c3b5f027a3cb1497777a36731c9ae2f6876793511965ea8e56a5504698c5877c52533038f89c40bf57530cb4ee63b228e055cefeef0b90755d44adc513f20f138859a605a623651fb25165"}, 0xb3) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000100)) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000200)=0x6) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000002c0)={0x0, 0x2}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4e, &(0x7f0000000000)=""/78}) socketpair(0x29, 0x3, 0x80000000, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1401}, 0xc, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYBLOB="779dadfe1cbd00010011", @ANYRES16=0x0, @ANYBLOB="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"], 0xffffffffffffffdf}}, 0x80) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000300)={0x4, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f0000000340)={0x9313000000000000, r5}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x5], 0x1, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000740)) (async) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000180)=0x1) (async) syz_open_dev$dri(&(0x7f0000000700), 0xffffffffffffffff, 0x80100) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000440)={0xf639, 0x0, 0x10001}) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x125400, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x1, 0x7fffffff, 0x5, 0x8], 0x4}) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)={0x0, 0x6b, 0xab, "3a33cc555feb542ba6761dda6839f52e032ed8a51fc43d981055bdd7198a29606656695591a236e6148bee707fccf04d86468250b2c79366dba4541214f1b19d571bbcd91cc26600554fa8978ad604a10ad3edd80f98d8e7ad48b0e0397a87e1c3b5f027a3cb1497777a36731c9ae2f6876793511965ea8e56a5504698c5877c52533038f89c40bf57530cb4ee63b228e055cefeef0b90755d44adc513f20f138859a605a623651fb25165"}, 0xb3) (async) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000100)) (async) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000200)=0x6) (async) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000002c0)={0x0, 0x2}) (async) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4e, &(0x7f0000000000)=""/78}) (async) socketpair(0x29, 0x3, 0x80000000, &(0x7f0000000500)) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1401}, 0xc, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYBLOB="779dadfe1cbd00010011", @ANYRES16=0x0, @ANYBLOB="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"], 0xffffffffffffffdf}}, 0x80) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000300)={0x4, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f0000000340)={0x9313000000000000, r5}) (async) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) 16:06:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x101800) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc7, 0x37, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x101800) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc7, 0x37}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 16:06:26 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) 16:06:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7fffffffffffffff, 0x981) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x6, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0]}) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x1b, 0xca82) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x20, 0x0, 0x1}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000000)={0x3ff, 0x400, 0xffffffff, 0x2, 0x5, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f00000002c0)={r4}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000300)={0x0, 0x3, 0x3, 0x1, 0x1, [0x84, 0x1, 0x8000, 0x1], [0x7, 0x1ff, 0x6b1], [0x8, 0x5, 0x58, 0x3f], [0x0, 0xfffffffffffffff7, 0x7fffffffffffffff, 0x3ff]}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000380)={&(0x7f0000ffd000/0x3000)=nil}) 16:06:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000000)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7fffffffffffffff, 0x981) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x6, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x7fffffffffffffff, 0x981) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x6, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) 16:06:26 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x5], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000740)) (async) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000180)=0x1) (async) r1 = syz_open_dev$dri(&(0x7f0000000700), 0xffffffffffffffff, 0x80100) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000440)={0xf639, 0x0, 0x10001}) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x125400, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x1, 0x7fffffff, 0x5, 0x8], 0x4}) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)={0x0, 0x6b, 0xab, "3a33cc555feb542ba6761dda6839f52e032ed8a51fc43d981055bdd7198a29606656695591a236e6148bee707fccf04d86468250b2c79366dba4541214f1b19d571bbcd91cc26600554fa8978ad604a10ad3edd80f98d8e7ad48b0e0397a87e1c3b5f027a3cb1497777a36731c9ae2f6876793511965ea8e56a5504698c5877c52533038f89c40bf57530cb4ee63b228e055cefeef0b90755d44adc513f20f138859a605a623651fb25165"}, 0xb3) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000100)) (async) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000200)=0x6) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000002c0)={0x0, 0x2}) (async) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4e, &(0x7f0000000000)=""/78}) (async, rerun: 32) socketpair(0x29, 0x3, 0x80000000, &(0x7f0000000500)={0xffffffffffffffff}) (rerun: 32) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1401}, 0xc, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYBLOB="779dadfe1cbd00010011", @ANYRES16=0x0, @ANYBLOB="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"], 0xffffffffffffffdf}}, 0x80) (async) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000300)={0x4, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f0000000340)={0x9313000000000000, r5}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4) 16:06:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x50d100) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x8bf, 0x0, 0x8, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x21c180) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0xf1c, 0x8, {0xffffffffffffffff}, {}, 0x6d7a46de, 0x5}) 16:06:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000000)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x50d100) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x8bf, 0x0, 0x8, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x21c180) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0xf1c, 0x8, {0xffffffffffffffff}, {}, 0x6d7a46de, 0x5}) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x50d100) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x8bf, 0x0, 0x8, 0x8}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x21c180) (async) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0xf1c, 0x8, {0xffffffffffffffff}, {}, 0x6d7a46de, 0x5}) (async) 16:06:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0]}) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x1b, 0xca82) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x20, 0x0, 0x1}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000000)={0x3ff, 0x400, 0xffffffff, 0x2, 0x5, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f00000002c0)={r4}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000300)={0x0, 0x3, 0x3, 0x1, 0x1, [0x84, 0x1, 0x8000, 0x1], [0x7, 0x1ff, 0x6b1], [0x8, 0x5, 0x58, 0x3f], [0x0, 0xfffffffffffffff7, 0x7fffffffffffffff, 0x3ff]}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000380)={&(0x7f0000ffd000/0x3000)=nil}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0]}) (async) syz_open_dev$dri(&(0x7f00000001c0), 0x1b, 0xca82) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x20, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000000)={0x3ff, 0x400, 0xffffffff, 0x2, 0x5, 0x8}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f00000002c0)={r4}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000300)={0x0, 0x3, 0x3, 0x1, 0x1, [0x84, 0x1, 0x8000, 0x1], [0x7, 0x1ff, 0x6b1], [0x8, 0x5, 0x58, 0x3f], [0x0, 0xfffffffffffffff7, 0x7fffffffffffffff, 0x3ff]}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000380)={&(0x7f0000ffd000/0x3000)=nil}) (async) 16:06:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x82e03) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000100)={r2, 0x2e}) 16:06:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7fffffffffffffff, 0x981) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x6, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) 16:06:26 executing program 2: ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000040)={0x0, 0x1}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4b, &(0x7f0000000180)=""/75}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xf0}, 0x1, 0x0, 0x0, 0xd0}, 0x20010040) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000000)={0x7, 0x6, 0x7}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={0x0, 0x3, 0x9eb, 0x7ff, 0xffff, 0x89, 0x9, 0x9, 0x32b9a33, 0x7, 0x4, 0x7}) 16:06:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0]}) (async) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x1b, 0xca82) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x20, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000000)={0x3ff, 0x400, 0xffffffff, 0x2, 0x5, 0x8}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f00000002c0)={r4}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000300)={0x0, 0x3, 0x3, 0x1, 0x1, [0x84, 0x1, 0x8000, 0x1], [0x7, 0x1ff, 0x6b1], [0x8, 0x5, 0x58, 0x3f], [0x0, 0xfffffffffffffff7, 0x7fffffffffffffff, 0x3ff]}) (async) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000380)={&(0x7f0000ffd000/0x3000)=nil}) 16:06:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x82e03) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000100)={r2, 0x2e}) 16:06:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x50d100) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x8bf, 0x0, 0x8, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x21c180) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0xf1c, 0x8, {0xffffffffffffffff}, {}, 0x6d7a46de, 0x5}) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x50d100) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x8bf, 0x0, 0x8, 0x8}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x21c180) (async) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0xf1c, 0x8, {0xffffffffffffffff}, {}, 0x6d7a46de, 0x5}) (async) 16:06:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x4}) 16:06:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) (async) 16:06:26 executing program 2: ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000040)={0x0, 0x1}) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4b, &(0x7f0000000180)=""/75}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xf0}, 0x1, 0x0, 0x0, 0xd0}, 0x20010040) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000000)={0x7, 0x6, 0x7}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={0x0, 0x3, 0x9eb, 0x7ff, 0xffff, 0x89, 0x9, 0x9, 0x32b9a33, 0x7, 0x4, 0x7}) 16:06:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x80100) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x3, 0xffffff82, 0x3, 0x100006, 0x3, 0x1], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) 16:06:26 executing program 2: ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000040)={0x0, 0x1}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4b, &(0x7f0000000180)=""/75}) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xf0}, 0x1, 0x0, 0x0, 0xd0}, 0x20010040) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000000)={0x7, 0x6, 0x7}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={0x0, 0x3, 0x9eb, 0x7ff, 0xffff, 0x89, 0x9, 0x9, 0x32b9a33, 0x7, 0x4, 0x7}) 16:06:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x80100) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x3, 0xffffff82, 0x3, 0x100006, 0x3, 0x1], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x80100) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x3, 0xffffff82, 0x3, 0x100006, 0x3, 0x1], 0x7, 0x80800}) (async) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) (async) 16:06:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) 16:06:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x4}) 16:06:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:26 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid_apple', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x8, [0xf5d5, 0x9, 0xffff, 0x7, 0x101, 0x2, 0x8, 0x9]}, &(0x7f00000000c0)=0x14) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1e8, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x200008e1}, 0x1) 16:06:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x82e03) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000100)={r2, 0x2e}) 16:06:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x4}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x4}) (async) 16:06:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={r2, 0x2}) 16:06:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x80100) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x3, 0xffffff82, 0x3, 0x100006, 0x3, 0x1], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) 16:06:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) 16:06:26 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid_apple', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x8, [0xf5d5, 0x9, 0xffff, 0x7, 0x101, 0x2, 0x8, 0x9]}, &(0x7f00000000c0)=0x14) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1e8, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x200008e1}, 0x1) 16:06:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={r2, 0x2}) 16:06:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="ddbdfbb176e35b39aee0345c16b8e135eec01958c69b3ffe754648e4101b14e552375960ad6ed447a5302e8939b5cfa8614011cbbca9815e6fffd726291ff848fae757c2f9fa84691c0cf58c5570e10da8d7", 0x52}) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000140)={0x38, &(0x7f0000000100)="6d4f8c10fbc6df18f72a1434ee28124c56404b945497cbff059fbbdba564ddb443fb1f05dd5aa3dbe620b14c0f63e9cad3cffb47c1508e13"}) 16:06:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x220}}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) 16:06:26 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid_apple', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x8, [0xf5d5, 0x9, 0xffff, 0x7, 0x101, 0x2, 0x8, 0x9]}, &(0x7f00000000c0)=0x14) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1e8, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x200008e1}, 0x1) 16:06:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={r2, 0x2}) 16:06:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="ddbdfbb176e35b39aee0345c16b8e135eec01958c69b3ffe754648e4101b14e552375960ad6ed447a5302e8939b5cfa8614011cbbca9815e6fffd726291ff848fae757c2f9fa84691c0cf58c5570e10da8d7", 0x52}) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000140)={0x38, &(0x7f0000000100)="6d4f8c10fbc6df18f72a1434ee28124c56404b945497cbff059fbbdba564ddb443fb1f05dd5aa3dbe620b14c0f63e9cad3cffb47c1508e13"}) 16:06:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x220}}, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, &(0x7f0000000040)) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000180)=""/167) 16:06:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="ddbdfbb176e35b39aee0345c16b8e135eec01958c69b3ffe754648e4101b14e552375960ad6ed447a5302e8939b5cfa8614011cbbca9815e6fffd726291ff848fae757c2f9fa84691c0cf58c5570e10da8d7", 0x52}) (rerun: 32) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000140)={0x38, &(0x7f0000000100)="6d4f8c10fbc6df18f72a1434ee28124c56404b945497cbff059fbbdba564ddb443fb1f05dd5aa3dbe620b14c0f63e9cad3cffb47c1508e13"}) 16:06:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x4c, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) 16:06:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6, 0x6}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000180)=""/167) 16:06:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x4c, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) 16:06:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x220}}, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6, 0x6}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x9, 0x0, 0x0, 0x8}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/fotg210_hcd', 0x581042, 0x180) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xfffffffffffff800, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={r2, 0x8}) 16:06:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x123000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x5e91, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000180)={0x1, 0x3, 0x5, 0x5, 0x11, 0x80000000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000001c0)={0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r3], 0x2}) 16:06:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 32) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000100)={r3}) (async, rerun: 32) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000180)=""/167) 16:06:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x4c, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) 16:06:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x9, 0x0, 0x0, 0x8}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/fotg210_hcd', 0x581042, 0x180) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xfffffffffffff800, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={r2, 0x8}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x9, 0x0, 0x0, 0x8}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/fotg210_hcd', 0x581042, 0x180) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xfffffffffffff800, 0x0, 0x10000}) (async) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={r2, 0x8}) (async) 16:06:26 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="010002000700b3b21a165dc254652d8ffd531088d4f11027af26b138e84ebdcaf0b0fd9fbc33176cb9e2547135aaccc52c8eb2a3e0249c1e50b7701da499bae4cd68937fb1ed03048d87e5399310bd4aeca0f0d8de76270008bd1c0fe5e0df9b51863b0bd28fbe35f35f290e88f83ce4b22923c2523f9372188df5e101c5c4862e1fd072f5345a3061bd0946a59f426be7064109cc208fa3dda310d2d71cec9e58038ae6ff007523e6b994405195dd9ef95e36d8e89c32a8690faa6679f9002b988a5e49c61b8b442922ebe0659f35"], &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0xff}, 0x8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x81, 0x8, 0x800, 0x1101, r0, 0x6, '\x00', 0x0, r2, 0x3, 0x5, 0x3, 0xb}, 0x48) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x144, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3f}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x840}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80}, {0x6}, {0x8, 0x15, 0x5bc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3ff}, {0x8, 0x15, 0x80}}]}, 0x144}}, 0x800) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r1, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}}, 0x84) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6, 0x6}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x9, 0x0, 0x0, 0x8}) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/fotg210_hcd', 0x581042, 0x180) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xfffffffffffff800, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={r2, 0x8}) 16:06:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) 16:06:26 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="010002000700b3b21a165dc254652d8ffd531088d4f11027af26b138e84ebdcaf0b0fd9fbc33176cb9e2547135aaccc52c8eb2a3e0249c1e50b7701da499bae4cd68937fb1ed03048d87e5399310bd4aeca0f0d8de76270008bd1c0fe5e0df9b51863b0bd28fbe35f35f290e88f83ce4b22923c2523f9372188df5e101c5c4862e1fd072f5345a3061bd0946a59f426be7064109cc208fa3dda310d2d71cec9e58038ae6ff007523e6b994405195dd9ef95e36d8e89c32a8690faa6679f9002b988a5e49c61b8b442922ebe0659f35"], &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0xff}, 0x8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x81, 0x8, 0x800, 0x1101, r0, 0x6, '\x00', 0x0, r2, 0x3, 0x5, 0x3, 0xb}, 0x48) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x144, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3f}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x840}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80}, {0x6}, {0x8, 0x15, 0x5bc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3ff}, {0x8, 0x15, 0x80}}]}, 0x144}}, 0x800) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r1, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}}, 0x84) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x1}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="010002000700b3b21a165dc254652d8ffd531088d4f11027af26b138e84ebdcaf0b0fd9fbc33176cb9e2547135aaccc52c8eb2a3e0249c1e50b7701da499bae4cd68937fb1ed03048d87e5399310bd4aeca0f0d8de76270008bd1c0fe5e0df9b51863b0bd28fbe35f35f290e88f83ce4b22923c2523f9372188df5e101c5c4862e1fd072f5345a3061bd0946a59f426be7064109cc208fa3dda310d2d71cec9e58038ae6ff007523e6b994405195dd9ef95e36d8e89c32a8690faa6679f9002b988a5e49c61b8b442922ebe0659f35"], &(0x7f00000000c0)=0xc) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0xff}, 0x8) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x81, 0x8, 0x800, 0x1101, r0, 0x6, '\x00', 0x0, r2, 0x3, 0x5, 0x3, 0xb}, 0x48) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x144, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3f}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x840}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80}, {0x6}, {0x8, 0x15, 0x5bc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3ff}, {0x8, 0x15, 0x80}}]}, 0x144}}, 0x800) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r1, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}}, 0x84) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x1}) (async) 16:06:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000001c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000100)={0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 16:06:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x123000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x5e91, 0x0, 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000180)={0x1, 0x3, 0x5, 0x5, 0x11, 0x80000000}) (rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000001c0)={0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r3], 0x2}) 16:06:26 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) connect$ax25(r0, &(0x7f0000000100)={{0x3, @null, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x48080}, 0x80) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) 16:06:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) 16:06:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="765aee20", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000000)=0x10) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x823a}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, 0x0, 0xdf045e78f3106853, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x6}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000000c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xffffffffffffffff}) 16:06:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000001c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000100)={0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000001c0)={r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000100)={0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 16:06:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x123000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x5e91, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000180)={0x1, 0x3, 0x5, 0x5, 0x11, 0x80000000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000001c0)={0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r3], 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x123000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x5e91}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000180)={0x1, 0x3, 0x5, 0x5, 0x11, 0x80000000}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000001c0)={0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r3], 0x2}) (async) 16:06:26 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) connect$ax25(r0, &(0x7f0000000100)={{0x3, @null, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x48080}, 0x80) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) 16:06:26 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="010002000700b3b21a165dc254652d8ffd531088d4f11027af26b138e84ebdcaf0b0fd9fbc33176cb9e2547135aaccc52c8eb2a3e0249c1e50b7701da499bae4cd68937fb1ed03048d87e5399310bd4aeca0f0d8de76270008bd1c0fe5e0df9b51863b0bd28fbe35f35f290e88f83ce4b22923c2523f9372188df5e101c5c4862e1fd072f5345a3061bd0946a59f426be7064109cc208fa3dda310d2d71cec9e58038ae6ff007523e6b994405195dd9ef95e36d8e89c32a8690faa6679f9002b988a5e49c61b8b442922ebe0659f35"], &(0x7f00000000c0)=0xc) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0xff}, 0x8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x81, 0x8, 0x800, 0x1101, r0, 0x6, '\x00', 0x0, r2, 0x3, 0x5, 0x3, 0xb}, 0x48) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x144, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3f}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x840}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80}, {0x6}, {0x8, 0x15, 0x5bc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3ff}, {0x8, 0x15, 0x80}}]}, 0x144}}, 0x800) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r1, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}}, 0x84) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) (async) 16:06:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="765aee20", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000000)=0x10) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x823a}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, 0x0, 0xdf045e78f3106853, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x6}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000000c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="765aee20", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000000)=0x10) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x823a}) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, 0x0, 0xdf045e78f3106853, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x6}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000000c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xffffffffffffffff}) (async) 16:06:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000001c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000100)={0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 16:06:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/mxl111sf_tuner', 0x416000, 0x1d3) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f00000000c0)={0x2, 0x7fffffff, 0x7f, 0x9, 0x5, 0x6, 0xd9, 0xfffffffb, 0x507}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000040)=0x7) 16:06:26 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) connect$ax25(r0, &(0x7f0000000100)={{0x3, @null, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x48080}, 0x80) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) 16:06:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/qat_c3xxx', 0x400, 0x40) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000100)) 16:06:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x2a00) nanosleep(&(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000180)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/isku', 0x101002, 0x1) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil}) 16:06:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x8000006, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x130, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0xfffb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9f6}, {0x6, 0x11, 0xae2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb9}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xadf6}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd0, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x40c0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={r1, 0xf249, 0x1000, 0xfffffff9, 0xb55, 0x200, 0x22, 0xec02, 0x9, 0x1000, 0x843, 0x936a}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="765aee20", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000000)=0x10) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x823a}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, 0x0, 0xdf045e78f3106853, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x6}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000000c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="765aee20", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000000)=0x10) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x823a}) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, 0x0, 0xdf045e78f3106853, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x6}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000000c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xffffffffffffffff}) (async) 16:06:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/mxl111sf_tuner', 0x416000, 0x1d3) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f00000000c0)={0x2, 0x7fffffff, 0x7f, 0x9, 0x5, 0x6, 0xd9, 0xfffffffb, 0x507}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000040)=0x7) 16:06:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/qat_c3xxx', 0x400, 0x40) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000100)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/qat_c3xxx', 0x400, 0x40) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000100)) (async) 16:06:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], 0x1}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x130, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0xfffb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9f6}, {0x6, 0x11, 0xae2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb9}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xadf6}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd0, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x40c0) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={r1, 0xf249, 0x1000, 0xfffffff9, 0xb55, 0x200, 0x22, 0xec02, 0x9, 0x1000, 0x843, 0x936a}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:26 executing program 4: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0x9, 0x100, 0x18497431, 0x1ff, 0x2, 0x8, 0x7}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x9f, 0xfffffffe, 0x2000, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r1}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/msr', 0x140, 0x148) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) 16:06:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/mxl111sf_tuner', 0x416000, 0x1d3) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f00000000c0)={0x2, 0x7fffffff, 0x7f, 0x9, 0x5, 0x6, 0xd9, 0xfffffffb, 0x507}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000040)=0x7) 16:06:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x8000006, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x8000006, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/qat_c3xxx', 0x400, 0x40) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000100)) [ 1194.753036] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:27 executing program 4: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0x9, 0x100, 0x18497431, 0x1ff, 0x2, 0x8, 0x7}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x9f, 0xfffffffe, 0x2000, 0x2, 0x5}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r1}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/msr', 0x140, 0x148) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) 16:06:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x2a00) nanosleep(&(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000180)) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/isku', 0x101002, 0x1) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil}) 16:06:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000000c0)={0x0, r1}) 16:06:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x130, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0xfffb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9f6}, {0x6, 0x11, 0xae2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb9}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xadf6}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd0, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x40c0) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={r1, 0xf249, 0x1000, 0xfffffff9, 0xb55, 0x200, 0x22, 0xec02, 0x9, 0x1000, 0x843, 0x936a}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0x81, 0x1000003f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000140)={0x15, &(0x7f0000000100)=""/21}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x8000, 0x9, 0xf5d, 0xa89e, 0x1, 0xdf1}) 16:06:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0x81, 0x1000003f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000140)={0x15, &(0x7f0000000100)=""/21}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x8000, 0x9, 0xf5d, 0xa89e, 0x1, 0xdf1}) 16:06:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000000c0)={0x0, r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8}) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000000c0)={0x0, r1}) (async) 16:06:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 16:06:27 executing program 4: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0x9, 0x100, 0x18497431, 0x1ff, 0x2, 0x8, 0x7}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x9f, 0xfffffffe, 0x2000, 0x2, 0x5}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r1}) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/msr', 0x140, 0x148) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) 16:06:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x2}) [ 1195.519611] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0x81, 0x1000003f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000140)={0x15, &(0x7f0000000100)=""/21}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x8000, 0x9, 0xf5d, 0xa89e, 0x1, 0xdf1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0x81, 0x1000003f}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000140)={0x15, &(0x7f0000000100)=""/21}) (async) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x8000, 0x9, 0xf5d, 0xa89e, 0x1, 0xdf1}) (async) 16:06:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x2}) (async) 16:06:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) [ 1195.595174] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x2a00) nanosleep(&(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000180)) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/isku', 0x101002, 0x1) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil}) 16:06:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000000c0)={0x0, r1}) 16:06:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x10000001, 0x9, 0x40006, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000040)={0x0, 0x5}) 16:06:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000000)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000000c0)={0x2}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x2}) (async) 16:06:28 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x1073) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 32) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 64) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000000c0)={0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (rerun: 64) 16:06:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xa784, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/hidraw', 0x40040, 0x1) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000001c0)={0x1, 0x9, &(0x7f00000000c0)=[0x8, 0x10001, 0x4, 0xbc0, 0x2, 0x3, 0x74bd3f8, 0x99, 0x6], &(0x7f0000000100)=[0x3f], &(0x7f0000000140)=[0x80000001, 0x1], &(0x7f0000000180)=[0x8, 0x0, 0x7ff, 0x9, 0x9, 0x73], 0x0, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x10000001, 0x9, 0x40006, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000040)={0x0, 0x5}) 16:06:28 executing program 3: setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000004c0)={0x0, 0x20}, 0x8) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0x0]}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000480)={0x5, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0], 0x6, 0x1, 0x4, 0x0, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) getpeername$ax25(r1, &(0x7f0000000100)={{0x3, @null}, [@rose, @rose, @default, @null, @remote, @bcast, @netrom, @default]}, &(0x7f0000000000)=0x48) 16:06:28 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) (async) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x1073) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xa784, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/hidraw', 0x40040, 0x1) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000001c0)={0x1, 0x9, &(0x7f00000000c0)=[0x8, 0x10001, 0x4, 0xbc0, 0x2, 0x3, 0x74bd3f8, 0x99, 0x6], &(0x7f0000000100)=[0x3f], &(0x7f0000000140)=[0x80000001, 0x1], &(0x7f0000000180)=[0x8, 0x0, 0x7ff, 0x9, 0x9, 0x73], 0x0, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) syz_open_dev$dri(&(0x7f0000000080), 0xa784, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/hidraw', 0x40040, 0x1) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000001c0)={0x1, 0x9, &(0x7f00000000c0)=[0x8, 0x10001, 0x4, 0xbc0, 0x2, 0x3, 0x74bd3f8, 0x99, 0x6], &(0x7f0000000100)=[0x3f], &(0x7f0000000140)=[0x80000001, 0x1], &(0x7f0000000180)=[0x8, 0x0, 0x7ff, 0x9, 0x9, 0x73], 0x0, 0x4}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) 16:06:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x10000001, 0x9, 0x40006, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000040)={0x0, 0x5}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x10000001, 0x9, 0x40006}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000040)={0x0, 0x5}) (async) 16:06:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000000)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000000c0)={0x2}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000000c0)={0x2}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) 16:06:29 executing program 3: setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000004c0)={0x0, 0x20}, 0x8) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0x0]}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000480)={0x5, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0], 0x6, 0x1, 0x4, 0x0, 0x4}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) (async) getpeername$ax25(r1, &(0x7f0000000100)={{0x3, @null}, [@rose, @rose, @default, @null, @remote, @bcast, @netrom, @default]}, &(0x7f0000000000)=0x48) 16:06:29 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x0) (async) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x1073) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xa784, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/hidraw', 0x40040, 0x1) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000001c0)={0x1, 0x9, &(0x7f00000000c0)=[0x8, 0x10001, 0x4, 0xbc0, 0x2, 0x3, 0x74bd3f8, 0x99, 0x6], &(0x7f0000000100)=[0x3f], &(0x7f0000000140)=[0x80000001, 0x1], &(0x7f0000000180)=[0x8, 0x0, 0x7ff, 0x9, 0x9, 0x73], 0x0, 0x4}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffc, 0x2d4302) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={0x0, 0x2}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dm_bufio', 0x103080, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:29 executing program 3: setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000004c0)={0x0, 0x20}, 0x8) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0x0]}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000480)={0x5, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0], 0x6, 0x1, 0x4, 0x0, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) getpeername$ax25(r1, &(0x7f0000000100)={{0x3, @null}, [@rose, @rose, @default, @null, @remote, @bcast, @netrom, @default]}, &(0x7f0000000000)=0x48) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000004c0)={0x0, 0x20}, 0x8) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0x0]}) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000480)={0x5, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0], 0x6, 0x1, 0x4, 0x0, 0x4}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) (async) getpeername$ax25(r1, &(0x7f0000000100)={{0x3, @null}, [@rose, @rose, @default, @null, @remote, @bcast, @netrom, @default]}, &(0x7f0000000000)=0x48) (async) 16:06:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8}) 16:06:29 executing program 1: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x80000001, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7}}, 0x2, 0x6, 0xfffffffd, 0x8001, 0x1e, 0x8001, 0x7f}, &(0x7f0000000040)=0x9c) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)={0x0, 0xcec6, 0x1, "80"}, 0x9) 16:06:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffc, 0x2d4302) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={0x0, 0x2}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffc, 0x2d4302) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={0x0, 0x2}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) 16:06:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dm_bufio', 0x103080, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x100000000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x100, 0x301280) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000380)={0x1000, 0x7, 0x9, 0x1ff, 0x14, 0x8001}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x100, 0x4d, 0x9, 0x6, 0x3f, 0x20, 0x3], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000300)) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000400)={r6, 0x0, 0x1000ec00, 0x1, 0x4}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000140)={r7, 0x2}) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) syz_open_dev$dri(&(0x7f00000003c0), 0x7, 0x4000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x0, r8}) 16:06:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8}) 16:06:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x2f}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:29 executing program 1: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x80000001, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7}}, 0x2, 0x6, 0xfffffffd, 0x8001, 0x1e, 0x8001, 0x7f}, &(0x7f0000000040)=0x9c) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)={0x0, 0xcec6, 0x1, "80"}, 0x9) 16:06:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dm_bufio', 0x103080, 0x1) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 16:06:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x100000000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) (async) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x100, 0x301280) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000380)={0x1000, 0x7, 0x9, 0x1ff, 0x14, 0x8001}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x100, 0x4d, 0x9, 0x6, 0x3f, 0x20, 0x3], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) (async) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000400)={r6, 0x0, 0x1000ec00, 0x1, 0x4}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000140)={r7, 0x2}) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) (async) syz_open_dev$dri(&(0x7f00000003c0), 0x7, 0x4000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x0, r8}) 16:06:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8}) (async) 16:06:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffc, 0x2d4302) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={0x0, 0x2}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffc, 0x2d4302) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={0x0, 0x2}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) 16:06:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x2f}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/bus/container', 0x10800, 0x144) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000240)=0x100) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0xfffffff9, 0x0, 0x8, 0x0, 0x8b43, 0x3], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f00000001c0)={0x1, 0x3, 0x9, 0xa, &(0x7f0000000140)=[{0x0, 0x49, 0x3, 0x800}, {0x800, 0x0, 0x2, 0x9}, {0x1, 0xf800, 0x1000, 0x40}, {0x7, 0x59, 0x1, 0x346}, {0x3, 0x2, 0x149e, 0x8000}, {0x0, 0x8, 0x5, 0x3}, {0x0, 0x6, 0x401, 0x8000}, {0xfffd, 0x1f, 0x8, 0x9}, {0x8, 0x2, 0x5, 0x8a}, {0x38, 0xfc1e, 0x1, 0x9}]}) 16:06:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x2f}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:29 executing program 1: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x80000001, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7}}, 0x2, 0x6, 0xfffffffd, 0x8001, 0x1e, 0x8001, 0x7f}, &(0x7f0000000040)=0x9c) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)={0x0, 0xcec6, 0x1, "80"}, 0x9) 16:06:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/bus/container', 0x10800, 0x144) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000240)=0x100) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0xfffffff9, 0x0, 0x8, 0x0, 0x8b43, 0x3], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f00000001c0)={0x1, 0x3, 0x9, 0xa, &(0x7f0000000140)=[{0x0, 0x49, 0x3, 0x800}, {0x800, 0x0, 0x2, 0x9}, {0x1, 0xf800, 0x1000, 0x40}, {0x7, 0x59, 0x1, 0x346}, {0x3, 0x2, 0x149e, 0x8000}, {0x0, 0x8, 0x5, 0x3}, {0x0, 0x6, 0x401, 0x8000}, {0xfffd, 0x1f, 0x8, 0x9}, {0x8, 0x2, 0x5, 0x8a}, {0x38, 0xfc1e, 0x1, 0x9}]}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/bus/container', 0x10800, 0x144) (async) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000240)=0x100) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0xfffffff9, 0x0, 0x8, 0x0, 0x8b43, 0x3], 0x6}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f00000001c0)={0x1, 0x3, 0x9, 0xa, &(0x7f0000000140)=[{0x0, 0x49, 0x3, 0x800}, {0x800, 0x0, 0x2, 0x9}, {0x1, 0xf800, 0x1000, 0x40}, {0x7, 0x59, 0x1, 0x346}, {0x3, 0x2, 0x149e, 0x8000}, {0x0, 0x8, 0x5, 0x3}, {0x0, 0x6, 0x401, 0x8000}, {0xfffd, 0x1f, 0x8, 0x9}, {0x8, 0x2, 0x5, 0x8a}, {0x38, 0xfc1e, 0x1, 0x9}]}) (async) 16:06:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x100000000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) (async) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x100, 0x301280) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000380)={0x1000, 0x7, 0x9, 0x1ff, 0x14, 0x8001}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x100, 0x4d, 0x9, 0x6, 0x3f, 0x20, 0x3], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000400)={r6, 0x0, 0x1000ec00, 0x1, 0x4}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000140)={r7, 0x2}) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) syz_open_dev$dri(&(0x7f00000003c0), 0x7, 0x4000) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x0, r8}) 16:06:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000100)={0x3f, 0x100, 0xef2, 0x3a, 0xd6, 0x7fff, 0x10000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000001c0)={0x0, 0x2}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) 16:06:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000100)={0x8, 0x0, 0x1, 0x9, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000000)={0x7, 0x10001, {}, {}, 0x8}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000280)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, '\x00', 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/bus/container', 0x10800, 0x144) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000240)=0x100) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0xfffffff9, 0x0, 0x8, 0x0, 0x8b43, 0x3], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f00000001c0)={0x1, 0x3, 0x9, 0xa, &(0x7f0000000140)=[{0x0, 0x49, 0x3, 0x800}, {0x800, 0x0, 0x2, 0x9}, {0x1, 0xf800, 0x1000, 0x40}, {0x7, 0x59, 0x1, 0x346}, {0x3, 0x2, 0x149e, 0x8000}, {0x0, 0x8, 0x5, 0x3}, {0x0, 0x6, 0x401, 0x8000}, {0xfffd, 0x1f, 0x8, 0x9}, {0x8, 0x2, 0x5, 0x8a}, {0x38, 0xfc1e, 0x1, 0x9}]}) 16:06:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000100)={0x3f, 0x100, 0xef2, 0x3a, 0xd6, 0x7fff, 0x10000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000001c0)={0x0, 0x2}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) 16:06:29 executing program 4: syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffc, 0x315042) socketpair(0x1e, 0x1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x16, 0x202) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x4000000, 0x6, 0x6960, 0x0, 0xff}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x7, 0xffff, 0x0, 0x4, 0x0, [0x2, 0x67d, 0x10000, 0x1], [0x101, 0x1, 0x9, 0x8], [0xc, 0x8, 0x8001, 0x9], [0xffff, 0x10000, 0x20, 0x18000000000000]}) 16:06:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffe, 0x503400) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1, 0x7, 0x3], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0x0, 0x0, 0x10000}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000100)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x4000001, 0x9, 0x3}) 16:06:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000100)={0x8, 0x0, 0x1, 0x9, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000000)={0x7, 0x10001, {}, {}, 0x8}) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000280)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, '\x00', 0x1, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000100)={0x3f, 0x100, 0xef2, 0x3a, 0xd6, 0x7fff, 0x10000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000001c0)={0x0, 0x2}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000100)={0x3f, 0x100, 0xef2, 0x3a, 0xd6, 0x7fff, 0x10000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000001c0)={0x0, 0x2}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) (async) 16:06:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xdb, 0x3, 0x1f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x3, 0x0, 0x401, 0x19, 0x6, 0x7], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r1}) 16:06:29 executing program 4: syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffc, 0x315042) socketpair(0x1e, 0x1, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x16, 0x202) (async, rerun: 64) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (rerun: 64) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x4000000, 0x6, 0x6960, 0x0, 0xff}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x7, 0xffff, 0x0, 0x4, 0x0, [0x2, 0x67d, 0x10000, 0x1], [0x101, 0x1, 0x9, 0x8], [0xc, 0x8, 0x8001, 0x9], [0xffff, 0x10000, 0x20, 0x18000000000000]}) 16:06:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffe, 0x503400) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1, 0x7, 0x3], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0x0, 0x0, 0x10000}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000100)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000100)={0x8, 0x0, 0x1, 0x9, 0x9}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000000)={0x7, 0x10001, {}, {}, 0x8}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000280)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, '\x00', 0x1, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x4000001, 0x9, 0x3}) 16:06:29 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x400000000000037a}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r0, 0x80000}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xdb, 0x3, 0x1f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x3, 0x0, 0x401, 0x19, 0x6, 0x7], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xdb, 0x3, 0x1f}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x3, 0x0, 0x401, 0x19, 0x6, 0x7], 0x6, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r1}) (async) 16:06:29 executing program 4: syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffc, 0x315042) socketpair(0x1e, 0x1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x16, 0x202) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x4000000, 0x6, 0x6960, 0x0, 0xff}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x7, 0xffff, 0x0, 0x4, 0x0, [0x2, 0x67d, 0x10000, 0x1], [0x101, 0x1, 0x9, 0x8], [0xc, 0x8, 0x8001, 0x9], [0xffff, 0x10000, 0x20, 0x18000000000000]}) syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffc, 0x315042) (async) socketpair(0x1e, 0x1, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x16, 0x202) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x4000000, 0x6, 0x6960, 0x0, 0xff}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x7, 0xffff, 0x0, 0x4, 0x0, [0x2, 0x67d, 0x10000, 0x1], [0x101, 0x1, 0x9, 0x8], [0xc, 0x8, 0x8001, 0x9], [0xffff, 0x10000, 0x20, 0x18000000000000]}) (async) 16:06:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x4000001, 0x9, 0x3}) 16:06:29 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0xffffffff], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1bc, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x4e, 0x33, @action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5}, @broadcast, @device_a, @from_mac, {0x8, 0x5a}}, @sp_mp_confirm={0xf, 0x2, {0x1, @default, {0x1, 0x6, [{0x9, 0x1}, {0xb}, {0x61, 0x1}, {0x18, 0x1}, {0x6c, 0x1}, {0x12}]}, @val={0x72, 0x6}, @val={0x2d, 0x1a, {0x200c, 0x2, 0x6, 0x0, {0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x300, 0x5, 0x1f}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x7f, 0x80, 0x401]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xbbd}, @NL80211_ATTR_FRAME={0xe9, 0x33, @probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @broadcast, @device_b, @random="0fbad03d3f9a", {0xc, 0x8}}, 0xffff, @default, 0x220, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x1b}, {0x16}, {0x36, 0x1}]}, @val={0x3, 0x1, 0x7}, @val={0x4, 0x6, {0x0, 0x0, 0xa2c, 0x3}}, @val={0x6, 0x2, 0x2}, @val={0x2d, 0x1a, {0x2000, 0x2, 0x1, 0x0, {0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x3, 0x3}}, @val={0x72, 0x6}, @void, [{0xdd, 0x7f, "0ad2f5f3547ea2b1678681ac8e70046a963196684a4e37e3f5e8a53c6c9f5494299fb08f6fb4a076169fafeddf56ae53061a08582300ba17f0fd43ee54e5a4628f7a8211432437ceab4941dd0b662ea8a646d4fa105a789db169967b2862fdd3b472bf518383ad6a8e497a053b9c03f277c0f8595b051df4259863d52dfa70"}]}}, @NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={@with_ht={{{}, {0x9}, @broadcast, @broadcast, @random="01023b3e1f86", {0x7, 0x20}}, @ver_80211n={0x0, 0xff, 0x1, 0x1, 0x0, 0x2}}, 0x11, @val={0x8c, 0x18, {0xd6f, "7f07220bb52d", @long="a0f9a3759260d610f884032786995fb7"}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0xffff, 0xff46, 0x5, 0x8, 0x3, 0xc6a]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x7fff, 0x0, 0x472, 0xffff]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) 16:06:30 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x400000000000037a}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r0, 0x80000}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffe, 0x503400) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1, 0x7, 0x3], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0x0, 0x0, 0x10000}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000100)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xdb, 0x3, 0x1f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x3, 0x0, 0x401, 0x19, 0x6, 0x7], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xdb, 0x3, 0x1f}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x3, 0x0, 0x401, 0x19, 0x6, 0x7], 0x6, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r1}) (async) 16:06:30 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0xffffffff], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1bc, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x4e, 0x33, @action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5}, @broadcast, @device_a, @from_mac, {0x8, 0x5a}}, @sp_mp_confirm={0xf, 0x2, {0x1, @default, {0x1, 0x6, [{0x9, 0x1}, {0xb}, {0x61, 0x1}, {0x18, 0x1}, {0x6c, 0x1}, {0x12}]}, @val={0x72, 0x6}, @val={0x2d, 0x1a, {0x200c, 0x2, 0x6, 0x0, {0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x300, 0x5, 0x1f}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x7f, 0x80, 0x401]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xbbd}, @NL80211_ATTR_FRAME={0xe9, 0x33, @probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @broadcast, @device_b, @random="0fbad03d3f9a", {0xc, 0x8}}, 0xffff, @default, 0x220, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x1b}, {0x16}, {0x36, 0x1}]}, @val={0x3, 0x1, 0x7}, @val={0x4, 0x6, {0x0, 0x0, 0xa2c, 0x3}}, @val={0x6, 0x2, 0x2}, @val={0x2d, 0x1a, {0x2000, 0x2, 0x1, 0x0, {0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x3, 0x3}}, @val={0x72, 0x6}, @void, [{0xdd, 0x7f, "0ad2f5f3547ea2b1678681ac8e70046a963196684a4e37e3f5e8a53c6c9f5494299fb08f6fb4a076169fafeddf56ae53061a08582300ba17f0fd43ee54e5a4628f7a8211432437ceab4941dd0b662ea8a646d4fa105a789db169967b2862fdd3b472bf518383ad6a8e497a053b9c03f277c0f8595b051df4259863d52dfa70"}]}}, @NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={@with_ht={{{}, {0x9}, @broadcast, @broadcast, @random="01023b3e1f86", {0x7, 0x20}}, @ver_80211n={0x0, 0xff, 0x1, 0x1, 0x0, 0x2}}, 0x11, @val={0x8c, 0x18, {0xd6f, "7f07220bb52d", @long="a0f9a3759260d610f884032786995fb7"}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0xffff, 0xff46, 0x5, 0x8, 0x3, 0xc6a]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x7fff, 0x0, 0x472, 0xffff]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) 16:06:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0xa, 0x0, 0xfffffffe, 0x8001], 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x2, 0x3, 0x3}) 16:06:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:30 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x400000000000037a}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r0, 0x80000}) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:30 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0xffffffff], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1bc, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x4e, 0x33, @action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5}, @broadcast, @device_a, @from_mac, {0x8, 0x5a}}, @sp_mp_confirm={0xf, 0x2, {0x1, @default, {0x1, 0x6, [{0x9, 0x1}, {0xb}, {0x61, 0x1}, {0x18, 0x1}, {0x6c, 0x1}, {0x12}]}, @val={0x72, 0x6}, @val={0x2d, 0x1a, {0x200c, 0x2, 0x6, 0x0, {0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x300, 0x5, 0x1f}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x7f, 0x80, 0x401]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xbbd}, @NL80211_ATTR_FRAME={0xe9, 0x33, @probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @broadcast, @device_b, @random="0fbad03d3f9a", {0xc, 0x8}}, 0xffff, @default, 0x220, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x1b}, {0x16}, {0x36, 0x1}]}, @val={0x3, 0x1, 0x7}, @val={0x4, 0x6, {0x0, 0x0, 0xa2c, 0x3}}, @val={0x6, 0x2, 0x2}, @val={0x2d, 0x1a, {0x2000, 0x2, 0x1, 0x0, {0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x3, 0x3}}, @val={0x72, 0x6}, @void, [{0xdd, 0x7f, "0ad2f5f3547ea2b1678681ac8e70046a963196684a4e37e3f5e8a53c6c9f5494299fb08f6fb4a076169fafeddf56ae53061a08582300ba17f0fd43ee54e5a4628f7a8211432437ceab4941dd0b662ea8a646d4fa105a789db169967b2862fdd3b472bf518383ad6a8e497a053b9c03f277c0f8595b051df4259863d52dfa70"}]}}, @NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={@with_ht={{{}, {0x9}, @broadcast, @broadcast, @random="01023b3e1f86", {0x7, 0x20}}, @ver_80211n={0x0, 0xff, 0x1, 0x1, 0x0, 0x2}}, 0x11, @val={0x8c, 0x18, {0xd6f, "7f07220bb52d", @long="a0f9a3759260d610f884032786995fb7"}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0xffff, 0xff46, 0x5, 0x8, 0x3, 0xc6a]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x7fff, 0x0, 0x472, 0xffff]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x50}, 0x40000) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) 16:06:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000040)={0x1, 0x1000, &(0x7f00000000c0)=""/4096}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000010c0)={0xd}) 16:06:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf0, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfc00}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8001}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x800) 16:06:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x43, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x80, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0xa, 0x0, 0xfffffffe, 0x8001], 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x2, 0x3, 0x3}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0xa, 0x0, 0xfffffffe, 0x8001], 0x4}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x2, 0x3, 0x3}) (async) 16:06:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 16:06:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf0, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfc00}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8001}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf0, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfc00}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8001}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) 16:06:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000040)={0x1, 0x1000, &(0x7f00000000c0)=""/4096}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000010c0)={0xd}) 16:06:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x0, 0x2000006, 0x5, 0x0, 0x7fff}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000000)={0x7, 0x6, 0xf0b6}) 16:06:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x43, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x80, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000180)={0x2c, &(0x7f00000000c0)=""/44}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0xa, 0x0, 0xfffffffe, 0x8001], 0x4}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x2, 0x3, 0x3}) 16:06:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000040)={0x1, 0x1000, &(0x7f00000000c0)=""/4096}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000010c0)={0xd}) 16:06:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf0, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfc00}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8001}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x800) 16:06:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x43, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x80, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x0, 0x2000006, 0x5, 0x0, 0x7fff}) (async) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000000)={0x7, 0x6, 0xf0b6}) (rerun: 64) 16:06:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = getpgid(0x0) syz_open_procfs$namespace(r1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000040)={0x7fff, 0x7, {r1}, {0xffffffffffffffff}, 0x1, 0x3}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 16:06:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000180)={0x2c, &(0x7f00000000c0)=""/44}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x0, 0x2000006, 0x5, 0x0, 0x7fff}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000000)={0x7, 0x6, 0xf0b6}) 16:06:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = getpgid(0x0) syz_open_procfs$namespace(r1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000040)={0x7fff, 0x7, {r1}, {0xffffffffffffffff}, 0x1, 0x3}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) getpgid(0x0) (async) syz_open_procfs$namespace(r1, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000040)={0x7fff, 0x7, {r1}, {0xffffffffffffffff}, 0x1, 0x3}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) 16:06:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xffeffffffffffbfa, 0x197100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0xe3, 0xffffffff, 0x7fffffff, 0xd6fe, 0xde0, 0x101, 0x6b}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000040)={0x0, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000140)={0x1, 0x3, 0x0, 0x4, &(0x7f0000000100)=[{0x20, 0x3, 0xf3a9, 0x9}, {0x1000, 0x5, 0x6, 0x8}, {0x9, 0xff, 0x3ff, 0x2}, {0x6, 0x1, 0x9, 0x7f}]}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000180)={0x4}) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 16:06:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = getpgid(0x0) syz_open_procfs$namespace(r1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000040)={0x7fff, 0x7, {r1}, {0xffffffffffffffff}, 0x1, 0x3}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) getpgid(0x0) (async) syz_open_procfs$namespace(r1, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000040)={0x7fff, 0x7, {r1}, {0xffffffffffffffff}, 0x1, 0x3}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) 16:06:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000180)={0x2c, &(0x7f00000000c0)=""/44}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x5, &(0x7f0000000200)=[{}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={r2, 0x29}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r5}) 16:06:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7ffffffffffffd, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x1, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000001c0)="bf24eca6d9df99f1c1052a5034f03b96a239859587b6c771b95732e9a80d2ac931c758b4946d166483ffdd583de0bc87c9a283be71a6b37a3aacc832f8d65467368bd1456423702eb3ca86960b55f998a73649144981eda3e1e74f7eb24afb641c6c960853f9ebf989582d5db06dc0bd9a1c5dbb2399db14b76cd84b6810261bb8368def9008a8a8b763f5aeea1c827fd2a3c7c4d94239cb189c1c4f46babc7ce6bf836aab17bcc9b1069951a5fdd5", 0xaf}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/virtio_gpu', 0x0, 0x40) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x7, 0xd6, 0x0, 0x1000, 0x1, 0x81, 0xdac1, 0x5}, &(0x7f0000000180)=0x20) 16:06:30 executing program 1: syz_open_dev$dri(&(0x7f0000000080), 0xa0000000000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x4040) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000100)=""/229) 16:06:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xffeffffffffffbfa, 0x197100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0xffeffffffffffbfa, 0x197100) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7ffffffffffffd, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x1, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000001c0)="bf24eca6d9df99f1c1052a5034f03b96a239859587b6c771b95732e9a80d2ac931c758b4946d166483ffdd583de0bc87c9a283be71a6b37a3aacc832f8d65467368bd1456423702eb3ca86960b55f998a73649144981eda3e1e74f7eb24afb641c6c960853f9ebf989582d5db06dc0bd9a1c5dbb2399db14b76cd84b6810261bb8368def9008a8a8b763f5aeea1c827fd2a3c7c4d94239cb189c1c4f46babc7ce6bf836aab17bcc9b1069951a5fdd5", 0xaf}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/virtio_gpu', 0x0, 0x40) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x7, 0xd6, 0x0, 0x1000, 0x1, 0x81, 0xdac1, 0x5}, &(0x7f0000000180)=0x20) syz_open_dev$dri(&(0x7f0000000080), 0x7ffffffffffffd, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x1, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000001c0)="bf24eca6d9df99f1c1052a5034f03b96a239859587b6c771b95732e9a80d2ac931c758b4946d166483ffdd583de0bc87c9a283be71a6b37a3aacc832f8d65467368bd1456423702eb3ca86960b55f998a73649144981eda3e1e74f7eb24afb641c6c960853f9ebf989582d5db06dc0bd9a1c5dbb2399db14b76cd84b6810261bb8368def9008a8a8b763f5aeea1c827fd2a3c7c4d94239cb189c1c4f46babc7ce6bf836aab17bcc9b1069951a5fdd5", 0xaf}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/virtio_gpu', 0x0, 0x40) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x7, 0xd6, 0x0, 0x1000, 0x1, 0x81, 0xdac1, 0x5}, &(0x7f0000000180)=0x20) (async) [ 1198.067399] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0xe3, 0xffffffff, 0x7fffffff, 0xd6fe, 0xde0, 0x101, 0x6b}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000040)={0x0, 0x7}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000140)={0x1, 0x3, 0x0, 0x4, &(0x7f0000000100)=[{0x20, 0x3, 0xf3a9, 0x9}, {0x1000, 0x5, 0x6, 0x8}, {0x9, 0xff, 0x3ff, 0x2}, {0x6, 0x1, 0x9, 0x7f}]}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000180)={0x4}) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 16:06:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x5, &(0x7f0000000200)=[{}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={r2, 0x29}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r5}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x5, &(0x7f0000000200)=[{}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={r2, 0x29}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r5}) (async) 16:06:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:30 executing program 1: syz_open_dev$dri(&(0x7f0000000080), 0xa0000000000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x4040) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000100)=""/229) syz_open_dev$dri(&(0x7f0000000080), 0xa0000000000, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x4040) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x8}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000100)=""/229) (async) 16:06:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xffeffffffffffbfa, 0x197100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7ffffffffffffd, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x1, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000000)=""/89}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000001c0)="bf24eca6d9df99f1c1052a5034f03b96a239859587b6c771b95732e9a80d2ac931c758b4946d166483ffdd583de0bc87c9a283be71a6b37a3aacc832f8d65467368bd1456423702eb3ca86960b55f998a73649144981eda3e1e74f7eb24afb641c6c960853f9ebf989582d5db06dc0bd9a1c5dbb2399db14b76cd84b6810261bb8368def9008a8a8b763f5aeea1c827fd2a3c7c4d94239cb189c1c4f46babc7ce6bf836aab17bcc9b1069951a5fdd5", 0xaf}) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/virtio_gpu', 0x0, 0x40) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x7, 0xd6, 0x0, 0x1000, 0x1, 0x81, 0xdac1, 0x5}, &(0x7f0000000180)=0x20) 16:06:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x5, &(0x7f0000000200)=[{}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={r2, 0x29}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) (async, rerun: 64) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r5}) 16:06:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0xe3, 0xffffffff, 0x7fffffff, 0xd6fe, 0xde0, 0x101, 0x6b}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000040)={0x0, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000140)={0x1, 0x3, 0x0, 0x4, &(0x7f0000000100)=[{0x20, 0x3, 0xf3a9, 0x9}, {0x1000, 0x5, 0x6, 0x8}, {0x9, 0xff, 0x3ff, 0x2}, {0x6, 0x1, 0x9, 0x7f}]}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000180)={0x4}) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 16:06:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, &(0x7f0000000000)=""/83}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/pci', 0x80001, 0xa) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) [ 1198.166366] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000000), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x3, 0x4, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000000)) 16:06:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, &(0x7f0000000000)=""/83}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/pci', 0x80001, 0xa) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, &(0x7f0000000000)=""/83}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/pci', 0x80001, 0xa) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) (async) 16:06:30 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x2, 0x5, 0x4}) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x2, 0x7, 0xf8, 0x0, 0x8, 0x0, 0xffffefff}) 16:06:30 executing program 1: syz_open_dev$dri(&(0x7f0000000080), 0xa0000000000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x4040) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000100)=""/229) syz_open_dev$dri(&(0x7f0000000080), 0xa0000000000, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x4040) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x8}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000100)=""/229) (async) [ 1198.216079] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 16:06:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000000), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x3, 0x4, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:30 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x2, 0x5, 0x4}) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x2, 0x7, 0xf8, 0x0, 0x8, 0x0, 0xffffefff}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x2, 0x5, 0x4}) (async) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x2, 0x7, 0xf8, 0x0, 0x8, 0x0, 0xffffefff}) (async) 16:06:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 16:06:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000000), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x3, 0x4, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000000), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x3, 0x4, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, &(0x7f0000000000)=""/83}) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/pci', 0x80001, 0xa) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) 16:06:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000000)) (rerun: 32) 16:06:30 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x2, 0x5, 0x4}) (async) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x2, 0x7, 0xf8, 0x0, 0x8, 0x0, 0xffffefff}) 16:06:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x118, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1bdd}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x20}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1f}}]}, 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x40) 16:06:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x140) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"63a5d4aed4c567d4e3bf58d048819510fb31e68be0a7c5f93318ad3c79cc86c4"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="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"/644], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x4800) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000200)={0x0, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/loop', 0x111d81, 0xc8) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x0, r1}) 16:06:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async, rerun: 32) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x118, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1bdd}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x20}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1f}}]}, 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x40) 16:06:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) 16:06:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x140) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"63a5d4aed4c567d4e3bf58d048819510fb31e68be0a7c5f93318ad3c79cc86c4"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="04002bbd7000fcdbdf25100000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00090000000600000005001400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0003000000060011000500000005000000010100000500140004000000080001007063690011000200303030303a30303a31302e300000000008000b00ffffffff06001100000000ca1ee89df9ea4bef0005001400010000000800010070630011000200303030303a30303a31302e300000000008000b0004000000060011000008000008001300050000000500140001000000080001007063690011000200303030303a30303a31302e300000000008000b00ff000000060011000700000008001300040000030500140000000000080001007063690011000200303030303a30303a31302e300000000008000b0002000000060011f4af35000008001300000000000500140001000000d78d847549038a71c67b7c7f6352ff168b7d0967246c6fee471cb9228361a9f9ba6a8fc68390d4a5f9eefb324cf2ab800ffc0823a505afe055cf2d564ea1055617767e48a7928d37b5ed46c31eacfaba1a80ab6759c299ff27d038e9750218af9dfe5161b22bfb9b8e9bb1402df0906fc1f9c3409ca5122a5132fc65515b638a3d7feefffe2d163a56e68998b23221aa469eee30cb42963d684f18acaf58458244300d8f3ecc865c4d59cda791a3ae5d037c9525a08e42bf426a930d3aab4e6e5f498d83b5cdae28f511e77b49b82bf0f9f99766a1e179e9e4994f9c2cce740c225cfb18344bfceceffd2000ecb9cc25ec19841cd7fb3db485592fac2794c9456da2adf30d1b6800"/644], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x4800) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000200)={0x0, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/loop', 0x111d81, 0xc8) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x0, r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x140) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) (async) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"63a5d4aed4c567d4e3bf58d048819510fb31e68be0a7c5f93318ad3c79cc86c4"}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="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"/644], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x4800) (async) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000200)={0x0, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/loop', 0x111d81, 0xc8) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x0, r1}) (async) 16:06:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, '\x00', 0x2, 0x9}) 16:06:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000000)) (async) 16:06:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x100000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000040)={0x9, 0x0, 0x7, 0x6, 0x5, 0x8, 0x3}) 16:06:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, '\x00', 0x2, 0x9}) 16:06:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) (async) 16:06:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x100000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000040)={0x9, 0x0, 0x7, 0x6, 0x5, 0x8, 0x3}) 16:06:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x5], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000140)={0x1f, 0x0, 0x3, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000180)={0x0, 0x0, 0x8, 0xe00000000000000, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 16:06:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x140) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"63a5d4aed4c567d4e3bf58d048819510fb31e68be0a7c5f93318ad3c79cc86c4"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="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"/644], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x4800) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000200)={0x0, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/loop', 0x111d81, 0xc8) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x0, r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x140) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/fs/xfs', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x0) (async) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"63a5d4aed4c567d4e3bf58d048819510fb31e68be0a7c5f93318ad3c79cc86c4"}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="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"/644], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x4800) (async) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000200)={0x0, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/loop', 0x111d81, 0xc8) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x0, r1}) (async) 16:06:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x118, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1bdd}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x20}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1f}}]}, 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x40) 16:06:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, '\x00', 0x2, 0x9}) 16:06:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) 16:06:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x100000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000040)={0x9, 0x0, 0x7, 0x6, 0x5, 0x8, 0x3}) 16:06:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x5], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000140)={0x1f, 0x0, 0x3, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000180)={0x0, 0x0, 0x8, 0xe00000000000000, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x5], 0x1, 0x80800}) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000140)={0x1f, 0x0, 0x3, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000180)={0x0, 0x0, 0x8, 0xe00000000000000, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 16:06:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/dvb_as102', 0x0, 0xa0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @broadcast}}, [0xb4, 0x9, 0x7fff, 0x20, 0x8, 0x1, 0x7e1, 0x7fffffff, 0x0, 0x4f4, 0xdcf5, 0x8, 0x4, 0x5, 0x2c3a]}, &(0x7f00000002c0)=0x100) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdd5, 0x0, 0xffffffe4, 0x0, 0x66, &(0x7f0000000000)=""/89}) 16:06:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) r3 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000100)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f00000000c0)={0x0, r2, 0x662, 0xb9c8, 0xe}) 16:06:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000100)={0x0, 0x1e}) 16:06:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000000)=0x54643481) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) [ 1198.570340] ================================================================== [ 1198.577896] BUG: KASAN: use-after-free in vgem_gem_dumb_create+0x200/0x210 [ 1198.584905] Read of size 8 at addr ffff8880a9669680 by task syz-executor.0/20537 [ 1198.592426] [ 1198.594046] CPU: 0 PID: 20537 Comm: syz-executor.0 Not tainted 4.14.275-syzkaller #0 [ 1198.601912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1198.611264] Call Trace: [ 1198.613849] dump_stack+0x1b2/0x281 16:06:30 executing program 4: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x1000008}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/devcoredump', 0x109082, 0x6) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f00000000c0)={0x0, 0xc1c, 0x4, 0x200, 0x13, 0x7}) 16:06:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000100)={0x0, 0x1e}) 16:06:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000100)={0x0, 0x1e}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000100)={0x0, 0x1e}) (async) 16:06:30 executing program 4: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x1000008}) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/devcoredump', 0x109082, 0x6) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) (async) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) (async) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f00000000c0)={0x0, 0xc1c, 0x4, 0x200, 0x13, 0x7}) [ 1198.617478] print_address_description.cold+0x54/0x1d3 [ 1198.622765] kasan_report_error.cold+0x8a/0x191 [ 1198.627427] ? vgem_gem_dumb_create+0x200/0x210 [ 1198.632089] __asan_report_load8_noabort+0x68/0x70 [ 1198.637015] ? vgem_gem_dumb_create+0x200/0x210 [ 1198.641684] vgem_gem_dumb_create+0x200/0x210 [ 1198.646263] drm_mode_create_dumb_ioctl+0x221/0x2b0 [ 1198.651281] ? __drm_printfn_debug+0x70/0x70 [ 1198.655687] drm_ioctl_kernel+0x14c/0x200 [ 1198.659831] drm_ioctl+0x42e/0x890 [ 1198.663372] ? __drm_printfn_debug+0x70/0x70 16:06:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x2, 0x3, {0xffffffffffffffff}, {}, 0x8f, 0x1}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0xbe, 0x9, {}, {0xffffffffffffffff}, 0x6, 0x6c}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x1000, 0x4fb1, {r1}, {r2}, 0x7, 0x6}) 16:06:30 executing program 4: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x1000008}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/devcoredump', 0x109082, 0x6) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000800), 0x3871, 0x80) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) (async) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f00000000c0)={0x0, 0xc1c, 0x4, 0x200, 0x13, 0x7}) 16:06:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x2, 0x3, {0xffffffffffffffff}, {}, 0x8f, 0x1}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0xbe, 0x9, {}, {0xffffffffffffffff}, 0x6, 0x6c}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x1000, 0x4fb1, {r1}, {r2}, 0x7, 0x6}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x2, 0x3, {0xffffffffffffffff}, {}, 0x8f, 0x1}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0xbe, 0x9, {}, {0xffffffffffffffff}, 0x6, 0x6c}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x1000, 0x4fb1, {r1}, {r2}, 0x7, 0x6}) (async) [ 1198.667775] ? drm_getstats+0x20/0x20 [ 1198.671580] ? trace_hardirqs_on+0x10/0x10 [ 1198.675812] ? drm_getstats+0x20/0x20 [ 1198.679607] do_vfs_ioctl+0x75a/0xff0 [ 1198.683407] ? lock_acquire+0x170/0x3f0 [ 1198.687384] ? ioctl_preallocate+0x1a0/0x1a0 [ 1198.691792] ? __fget+0x265/0x3e0 [ 1198.695247] ? do_vfs_ioctl+0xff0/0xff0 [ 1198.699215] ? security_file_ioctl+0x83/0xb0 [ 1198.703617] SyS_ioctl+0x7f/0xb0 [ 1198.706974] ? do_vfs_ioctl+0xff0/0xff0 [ 1198.710946] do_syscall_64+0x1d5/0x640 [ 1198.714834] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1198.720111] RIP: 0033:0x7febafe24049 [ 1198.723810] RSP: 002b:00007febae778168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1198.731509] RAX: ffffffffffffffda RBX: 00007febaff37030 RCX: 00007febafe24049 [ 1198.738776] RDX: 0000000020000040 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1198.746043] RBP: 00007febafe7e08d R08: 0000000000000000 R09: 0000000000000000 [ 1198.753311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1198.760585] R13: 00007fff49033c3f R14: 00007febae778300 R15: 0000000000022000 [ 1198.767866] [ 1198.769486] Allocated by task 20537: [ 1198.773198] kasan_kmalloc+0xeb/0x160 [ 1198.776993] kmem_cache_alloc_trace+0x131/0x3d0 [ 1198.781652] __vgem_gem_create+0x44/0xe0 [ 1198.785712] vgem_gem_dumb_create+0xc5/0x210 [ 1198.790112] drm_mode_create_dumb_ioctl+0x221/0x2b0 [ 1198.795117] drm_ioctl_kernel+0x14c/0x200 [ 1198.799256] drm_ioctl+0x42e/0x890 [ 1198.802775] do_vfs_ioctl+0x75a/0xff0 [ 1198.806549] SyS_ioctl+0x7f/0xb0 [ 1198.809892] do_syscall_64+0x1d5/0x640 [ 1198.813767] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1198.818930] [ 1198.820537] Freed by task 20537: [ 1198.823882] kasan_slab_free+0xc3/0x1a0 [ 1198.827830] kfree+0xc9/0x250 [ 1198.830921] drm_gem_object_free+0x8f/0x150 [ 1198.835234] drm_gem_object_put_unlocked+0xc3/0x160 [ 1198.840228] vgem_gem_dumb_create+0xf2/0x210 [ 1198.844616] drm_mode_create_dumb_ioctl+0x221/0x2b0 [ 1198.850051] drm_ioctl_kernel+0x14c/0x200 [ 1198.854180] drm_ioctl+0x42e/0x890 [ 1198.857704] do_vfs_ioctl+0x75a/0xff0 [ 1198.861478] SyS_ioctl+0x7f/0xb0 [ 1198.864821] do_syscall_64+0x1d5/0x640 [ 1198.868684] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1198.873847] [ 1198.875449] The buggy address belongs to the object at ffff8880a9669580 [ 1198.875449] which belongs to the cache kmalloc-512 of size 512 [ 1198.888089] The buggy address is located 256 bytes inside of [ 1198.888089] 512-byte region [ffff8880a9669580, ffff8880a9669780) [ 1198.899953] The buggy address belongs to the page: [ 1198.904859] page:ffffea0002a59a40 count:1 mapcount:0 mapping:ffff8880a9669080 index:0xffff8880a9669800 [ 1198.914286] flags: 0xfff00000000100(slab) [ 1198.918410] raw: 00fff00000000100 ffff8880a9669080 ffff8880a9669800 0000000100000004 [ 1198.926284] raw: ffffea00026fc360 ffffea0002958b60 ffff88813fe74940 0000000000000000 [ 1198.934155] page dumped because: kasan: bad access detected [ 1198.939835] [ 1198.941435] Memory state around the buggy address: [ 1198.946340] ffff8880a9669580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1198.953681] ffff8880a9669600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1198.961029] >ffff8880a9669680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1198.968367] ^ [ 1198.971713] ffff8880a9669700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1198.979053] ffff8880a9669780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1198.986388] ================================================================== [ 1198.993719] Disabling lock debugging due to kernel taint [ 1199.009101] Kernel panic - not syncing: panic_on_warn set ... [ 1199.009101] [ 1199.016658] CPU: 1 PID: 20537 Comm: syz-executor.0 Tainted: G B 4.14.275-syzkaller #0 [ 1199.025741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1199.035072] Call Trace: [ 1199.037638] dump_stack+0x1b2/0x281 [ 1199.041265] panic+0x1f9/0x42d [ 1199.044434] ? add_taint.cold+0x16/0x16 [ 1199.048381] ? ___preempt_schedule+0x16/0x18 [ 1199.052766] kasan_end_report+0x43/0x49 [ 1199.056712] kasan_report_error.cold+0xa7/0x191 [ 1199.061356] ? vgem_gem_dumb_create+0x200/0x210 [ 1199.066095] __asan_report_load8_noabort+0x68/0x70 [ 1199.070996] ? vgem_gem_dumb_create+0x200/0x210 [ 1199.075637] vgem_gem_dumb_create+0x200/0x210 [ 1199.080105] drm_mode_create_dumb_ioctl+0x221/0x2b0 [ 1199.085097] ? __drm_printfn_debug+0x70/0x70 [ 1199.089476] drm_ioctl_kernel+0x14c/0x200 [ 1199.093597] drm_ioctl+0x42e/0x890 [ 1199.097114] ? __drm_printfn_debug+0x70/0x70 [ 1199.101496] ? drm_getstats+0x20/0x20 [ 1199.105276] ? trace_hardirqs_on+0x10/0x10 [ 1199.109501] ? drm_getstats+0x20/0x20 [ 1199.113290] do_vfs_ioctl+0x75a/0xff0 [ 1199.117135] ? lock_acquire+0x170/0x3f0 [ 1199.121087] ? ioctl_preallocate+0x1a0/0x1a0 [ 1199.125471] ? __fget+0x265/0x3e0 [ 1199.128897] ? do_vfs_ioctl+0xff0/0xff0 [ 1199.132846] ? security_file_ioctl+0x83/0xb0 [ 1199.137230] SyS_ioctl+0x7f/0xb0 [ 1199.140568] ? do_vfs_ioctl+0xff0/0xff0 [ 1199.144525] do_syscall_64+0x1d5/0x640 [ 1199.148396] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1199.153570] RIP: 0033:0x7febafe24049 [ 1199.157252] RSP: 002b:00007febae778168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1199.164932] RAX: ffffffffffffffda RBX: 00007febaff37030 RCX: 00007febafe24049 [ 1199.172174] RDX: 0000000020000040 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1199.179599] RBP: 00007febafe7e08d R08: 0000000000000000 R09: 0000000000000000 [ 1199.186840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1199.194084] R13: 00007fff49033c3f R14: 00007febae778300 R15: 0000000000022000 [ 1199.201597] Kernel Offset: disabled [ 1199.205203] Rebooting in 86400 seconds..