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", 0x1000, 0x2}, {&(0x7f00000012c0)="b40cafac018a429e0d312610c47bae64a3f9f468c7fe03a014f994ce0ef66d754d47a252d4c1fd7ddf53235ba41f6bef36438a0e1b0f9c8b0e4ea94eae74367b948febb391d8912fc0bbbf417344628873f715a929452687d29c195d6a182ca075b235769778f77914a75edcc0617e62cfad3cb2e028b2d3f74900a4681e686957b2da35", 0x84, 0x101}, {&(0x7f0000001380)="36b028e33a9195b5081bc52057c59878e80bf12f71b8d62408dfba53cab9043313c4afa21051e951519429a1944b7abd3dea1ed27c4ee90128e04f6d83153ea1c4ed7058471517db9032906a422a515a238a575512883ef2f9b30c66308c891049f55ecb9a1f8d5d09d2d7ee251c43b1d89dfbc72b34849062ff15a02c42c6dd56c9b6577ccf63", 0x87, 0xffffffffffffffe1}, {&(0x7f0000001440)="a0078dbed872431638adb36f0e947347cad1f04c987d981c8664c788b7248be7e958e54fefe054e714382479103a4a95e9905a675f6e3160d665daf042d2028ce9fce08b0efa01e45aefdfb8ca0e6dce8bc3561e0d359bea0af3a48038ebb7b27c99b40009c00bce60636692ded5b403d761015a6815b2c479cd3d8dc02b62acae57530fc90cc3fdcc5350c396d884a28730e7f7919cb70254836cf4b6f88f99d5e6afd6864dd7a73f71ee3b08fef912004b4f99115cd4d0a9e97772e64859b6a31373e7cbb58aba358745af3bc904b698659fadb840d1f1c2684c8676bc6e1360dbf3168a92017dae453ee18edd8f53d5428d1c24a23ed5", 0xf8, 0xfffffffffffffff7}, {&(0x7f0000001540)="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", 0x1000, 0x4}, {&(0x7f0000002540)="b53b4676ae993ca5b44899c781d45634e9ca1597bf8be3cc41ce51e3fed80b42c66b168bae93a3ff4defea8100ae4130efe16f0d68aa21ce8a4e435f474f0bae7891c05050ab31c27b72c2c42f608fe10885940a6e842e13be246afd3056d322a96081f192177c911289266d366e6c45ae4f0465acc6cc58b6daa1828838d70f05e5f38ee58f175e9e245a0841cb80cf4ee3f8538ed115b666c474560677c4163af0f8093de10645bfc6094468eb5d14e54061247d4aa799726bfe571f75ccbe58b1810f1d3cc4dd9ce650312ee2d462b99a4c9d7d28a20df8a146aceb0ddd94b60c0a215d7cbb361fca7154ff9f7a8061dd", 0xf2, 0x6}, {&(0x7f0000002640)="769c94b86228fe8124a46f8dd2749496ab2d05bc7012b4565d2b37e28ee4e445a465fb854f5fb37ea0be8199fe770655e5e16bd76eeab8bac94d11ba6775192404897de42e0b8643ae790e23c5d2d261bb48d4f8fc5e58da6eece28d65236f5032122d2493968ae861468f13b7dba32b0a3488628b7319e055b32432299094efc58e4723560c32b667f3c749d0078ea19f564b859da757f88544d187aaf29dae46fc1aa9bf931f1c5f4752e67564dbbb6c6e76607b0520b084d302f002df85949c5fc89fbadc", 0xc6, 0x4000000000000}, {&(0x7f0000002740)="1185646e71aac56ccc24c73a3a247652276d7ec2f7f6bd1190f4910a0a1504eebd22f0fdea9cef09fe3b0d1c65a2f00bddb7323640fda82a7bc7fbd9815bee498fc09e1a8416a8c89405de58918336e4e3781af29da3344403660871c0086ff1795e952c4ae14dd05b2fba64c4a781aad3fd40a059682329c1d0bf8088127f0fcd15594fbb47", 0x86, 0x4}, {&(0x7f00000000c0)="571a8cee345bb6df6bef", 0xa, 0x6d253224}], 0x24000, &(0x7f0000002a40)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r1, @ANYBLOB=',uid=', @ANYRESHEX, @ANYBLOB="2c6572726f72733d636f6e74696e75652c6e6f71756f74612c6e6f696e746567726974792c6e6f696e746567726974792c646f6e745f6d6561737572652c6d61736b3d5e4d41595f57524954452c736d61636b66736861743d2f6465762f6472692f6361726423002c009eaf81317565196c94f20fba0995360bff8b7ef19e82033cdb5961b308eca749b9ca51c0b2adc9528315778175c08d78c50bf4"]) (async) 08:14:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x84001e, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000080)={0x2, 0xffffffff, 0x6, 0x9, 0x6, 0x7}) 08:14:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:14 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x6001, 0x32) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) ioctl$KVM_NMI(r2, 0xae9a) setsockopt$bt_BT_DEFER_SETUP(r6, 0x29, 0x36, 0x0, 0x53bbb5f5) 08:14:14 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000002080), 0x4, 0x101000) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) [ 1297.998862][ T2419] loop5: detected capacity change from 0 to 264192 08:14:14 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000011c0)={&(0x7f0000001180)=[0x2, 0x4, 0x6, 0xfffffffd, 0x2], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000001200)) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0xb, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/msi2500', 0x442600, 0x40) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x4000) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000001140)={r4, &(0x7f0000000140)=""/4096}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000040)) 08:14:14 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x6001, 0x32) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) ioctl$KVM_NMI(r2, 0xae9a) 08:14:14 executing program 0: r0 = syz_open_dev$audion(0x0, 0x4, 0x101000) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) 08:14:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x84001e, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) syz_open_dev$dri(&(0x7f0000000000), 0x84001e, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) 08:14:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1e, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x18041, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000080)={0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000080)={0x2, 0xffffffff, 0x6, 0x9, 0x6, 0x7}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000080)={0x2, 0xffffffff, 0x6, 0x9, 0x6, 0x7}) (async) 08:14:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x84001e, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:14 executing program 0: r0 = syz_open_dev$audion(0x0, 0x4, 0x101000) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) 08:14:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1e, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x18041, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000080)={0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) syz_open_dev$dri(&(0x7f0000000000), 0x1e, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x18041, 0x0) (async) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000080)={0x0, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) 08:14:14 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x6001, 0x32) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r5, 0xcd5, 0x80000}) 08:14:14 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x6001, 0x32) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) ioctl$KVM_NMI(r2, 0xae9a) 08:14:14 executing program 0: r0 = syz_open_dev$audion(0x0, 0x4, 0x101000) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) 08:14:14 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x6001, 0x32) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) 08:14:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1e, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x18041, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000080)={0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) syz_open_dev$dri(&(0x7f0000000000), 0x1e, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x18041, 0x0) (async) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000080)={0x0, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) 08:14:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1b, 0xc1) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x5c, 0x200, 0x6, 0x3, 0x100000001, 0x80000000], 0x7, 0x1, 0x2}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x8, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000680)={0x0, 0x0, 0x18, 0xe, 0xaf, &(0x7f0000000280)="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"}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000180)={0x2, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f00000001c0)={r4, 0x56b4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000140)={0x1, 0xffffffff, 0xffffffff, 0xc628, 0x8, 0x16a7933}) 08:14:14 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x6001, 0x32) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r5, 0xcd5, 0x80000}) 08:14:14 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000002080), 0x0, 0x101000) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) 08:14:14 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x6001, 0x32) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 08:14:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1b, 0xc1) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) (async, rerun: 32) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x5c, 0x200, 0x6, 0x3, 0x100000001, 0x80000000], 0x7, 0x1, 0x2}) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (rerun: 64) 08:14:14 executing program 5: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000080)={0x8, 0xdd}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xe8, 0x100004, 0x85}) 08:14:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1b, 0xc1) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x5c, 0x200, 0x6, 0x3, 0x100000001, 0x80000000], 0x7, 0x1, 0x2}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 64) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x8, 0x80000}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (rerun: 64) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000680)={0x0, 0x0, 0x18, 0xe, 0xaf, &(0x7f0000000280)="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"}) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000180)={0x2, 0x0, 0x1}) (rerun: 64) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f00000001c0)={r4, 0x56b4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000140)={0x1, 0xffffffff, 0xffffffff, 0xc628, 0x8, 0x16a7933}) 08:14:14 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000002080), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) 08:14:14 executing program 5: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000080)={0x8, 0xdd}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xe8, 0x100004, 0x85}) socket$bt_bnep(0x1f, 0x3, 0x4) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000080)={0x8, 0xdd}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xe8, 0x100004, 0x85}) (async) 08:14:14 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x6001, 0x32) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) 08:14:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1b, 0xc1) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x5c, 0x200, 0x6, 0x3, 0x100000001, 0x80000000], 0x7, 0x1, 0x2}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:14 executing program 5: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000080)={0x8, 0xdd}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xe8, 0x100004, 0x85}) (rerun: 64) 08:14:14 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x6001, 0x32) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) 08:14:14 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000002080), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) 08:14:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1b, 0xc1) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x5c, 0x200, 0x6, 0x3, 0x100000001, 0x80000000], 0x7, 0x1, 0x2}) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x8, 0x80000}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (rerun: 64) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000680)={0x0, 0x0, 0x18, 0xe, 0xaf, &(0x7f0000000280)="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"}) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000180)={0x2, 0x0, 0x1}) (rerun: 32) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f00000001c0)={r4, 0x56b4}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) (async, rerun: 32) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000140)={0x1, 0xffffffff, 0xffffffff, 0xc628, 0x8, 0x16a7933}) 08:14:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1b, 0xc1) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x5c, 0x200, 0x6, 0x3, 0x100000001, 0x80000000], 0x7, 0x1, 0x2}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:15 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x6001, 0x32) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 08:14:15 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000002080), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) 08:14:15 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x6001, 0x32) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 08:14:15 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/59}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:15 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x6001, 0x32) 08:14:15 executing program 0: syz_open_dev$audion(&(0x7f0000002080), 0x0, 0x101000) read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020}, 0x2020) 08:14:15 executing program 5: socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2004, 0x1ff, 0x8}) 08:14:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r7) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x0, r6, 0x100cd5}) ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f00000000c0)={0x0, 0x2}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000180)={0x1, 0xfffffffffffffff8}) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, &(0x7f0000000280)={0x1000, 0x6}) 08:14:15 executing program 5: socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) (async) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2004, 0x1ff, 0x8}) 08:14:15 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/59}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:15 executing program 0: syz_open_dev$audion(&(0x7f0000002080), 0x0, 0x101000) read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020}, 0x2020) 08:14:15 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x6001, 0x32) 08:14:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) 08:14:15 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/59}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:15 executing program 5: socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2004, 0x1ff, 0x8}) socket$pppl2tp(0x18, 0x1, 0x1) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x0) (async) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2004, 0x1ff, 0x8}) (async) 08:14:15 executing program 0: syz_open_dev$audion(&(0x7f0000002080), 0x0, 0x101000) read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020}, 0x2020) 08:14:15 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x6001, 0x32) 08:14:15 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:15 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x6001, 0x32) 08:14:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r7) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x0, r6, 0x100cd5}) ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f00000000c0)={0x0, 0x2}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000180)={0x1, 0xfffffffffffffff8}) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, &(0x7f0000000280)={0x1000, 0x6}) 08:14:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) 08:14:15 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0xffffffff, 0x89, 0x7, 0x101, 0x3b], &(0x7f0000000140)=[0x0, 0x0], 0x5, 0x1000, 0xcccccccc}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000001c0)) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x220602, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x1000b, 0x805, 0x2}) 08:14:15 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000002080), 0x0, 0x101000) read$FUSE(r0, 0x0, 0x0) 08:14:15 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) (async) 08:14:15 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x6001, 0x32) 08:14:15 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:15 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0xffffffff, 0x89, 0x7, 0x101, 0x3b], &(0x7f0000000140)=[0x0, 0x0], 0x5, 0x1000, 0xcccccccc}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000001c0)) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x220602, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x1000b, 0x805, 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0xffffffff, 0x89, 0x7, 0x101, 0x3b], &(0x7f0000000140)=[0x0, 0x0], 0x5, 0x1000, 0xcccccccc}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000001c0)) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x220602, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x1000b, 0x805, 0x2}) (async) 08:14:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r7) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x0, r6, 0x100cd5}) ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f00000000c0)={0x0, 0x2}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000180)={0x1, 0xfffffffffffffff8}) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, &(0x7f0000000280)={0x1000, 0x6}) 08:14:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) 08:14:15 executing program 3: openat$sysfs(0xffffffffffffff9c, 0x0, 0x6001, 0x32) 08:14:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r7) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x0, r6, 0x100cd5}) ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f00000000c0)={0x0, 0x2}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000180)={0x1, 0xfffffffffffffff8}) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, &(0x7f0000000280)={0x1000, 0x6}) 08:14:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1f, 0x180) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:15 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000003c0)={0x501, 0x2, &(0x7f00000000c0)=[0x5, 0x6], &(0x7f0000000140)=[0x8, 0xffffffff, 0x3ff, 0x7ff], &(0x7f0000000180)=[0x5, 0x8000, 0x8, 0x0, 0x6a2, 0xffff, 0xf9b6, 0xb1, 0xff, 0x0], &(0x7f00000001c0)=[0x3d0e, 0x0, 0x7fffffff, 0x40, 0x20, 0x0, 0xff, 0x1, 0x8001], 0x0, 0x3}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000080)={0x1, 0x3, 0xffffffc1, 0xff, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x2148, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000280)) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x5}) 08:14:15 executing program 3: openat$sysfs(0xffffffffffffff9c, 0x0, 0x6001, 0x32) 08:14:15 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0xffffffff, 0x89, 0x7, 0x101, 0x3b], &(0x7f0000000140)=[0x0, 0x0], 0x5, 0x1000, 0xcccccccc}) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000001c0)) (async) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x220602, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x1000b, 0x805, 0x2}) 08:14:15 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000003c0)={0x501, 0x2, &(0x7f00000000c0)=[0x5, 0x6], &(0x7f0000000140)=[0x8, 0xffffffff, 0x3ff, 0x7ff], &(0x7f0000000180)=[0x5, 0x8000, 0x8, 0x0, 0x6a2, 0xffff, 0xf9b6, 0xb1, 0xff, 0x0], &(0x7f00000001c0)=[0x3d0e, 0x0, 0x7fffffff, 0x40, 0x20, 0x0, 0xff, 0x1, 0x8001], 0x0, 0x3}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000080)={0x1, 0x3, 0xffffffc1, 0xff, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x2148, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000280)) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x5}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000003c0)={0x501, 0x2, &(0x7f00000000c0)=[0x5, 0x6], &(0x7f0000000140)=[0x8, 0xffffffff, 0x3ff, 0x7ff], &(0x7f0000000180)=[0x5, 0x8000, 0x8, 0x0, 0x6a2, 0xffff, 0xf9b6, 0xb1, 0xff, 0x0], &(0x7f00000001c0)=[0x3d0e, 0x0, 0x7fffffff, 0x40, 0x20, 0x0, 0xff, 0x1, 0x8001], 0x0, 0x3}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) (async) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000080)={0x1, 0x3, 0xffffffc1, 0xff, 0x7, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x2148, 0x0) (async) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000280)) (async) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000000)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x5}) (async) 08:14:15 executing program 3: openat$sysfs(0xffffffffffffff9c, 0x0, 0x6001, 0x32) 08:14:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1f, 0x180) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x400000000001f, 0x70400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) 08:14:15 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000003c0)={0x501, 0x2, &(0x7f00000000c0)=[0x5, 0x6], &(0x7f0000000140)=[0x8, 0xffffffff, 0x3ff, 0x7ff], &(0x7f0000000180)=[0x5, 0x8000, 0x8, 0x0, 0x6a2, 0xffff, 0xf9b6, 0xb1, 0xff, 0x0], &(0x7f00000001c0)=[0x3d0e, 0x0, 0x7fffffff, 0x40, 0x20, 0x0, 0xff, 0x1, 0x8001], 0x0, 0x3}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000080)={0x1, 0x3, 0xffffffc1, 0xff, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x2148, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000280)) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x5}) 08:14:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1f, 0x180) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:16 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000003c0)={0x501, 0x2, &(0x7f00000000c0)=[0x5, 0x6], &(0x7f0000000140)=[0x8, 0xffffffff, 0x3ff, 0x7ff], &(0x7f0000000180)=[0x5, 0x8000, 0x8, 0x0, 0x6a2, 0xffff, 0xf9b6, 0xb1, 0xff, 0x0], &(0x7f00000001c0)=[0x3d0e, 0x0, 0x7fffffff, 0x40, 0x20, 0x0, 0xff, 0x1, 0x8001], 0x0, 0x3}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000080)={0x1, 0x3, 0xffffffc1, 0xff, 0x7, 0x2}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x2148, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000280)) (async, rerun: 32) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000000)={0x0, 0x1}) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x5}) [ 1299.938171][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.944531][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 08:14:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r7) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x0, r6, 0x100cd5}) ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f00000000c0)={0x0, 0x2}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000180)={0x1, 0xfffffffffffffff8}) 08:14:16 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x0, 0x32) 08:14:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000180)={0x0, &(0x7f0000000280)=""/191}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000340)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000140)={r7, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 08:14:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x400000000001f, 0x70400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0x400000000001f, 0x70400) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 08:14:16 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000003c0)={0x501, 0x2, &(0x7f00000000c0)=[0x5, 0x6], &(0x7f0000000140)=[0x8, 0xffffffff, 0x3ff, 0x7ff], &(0x7f0000000180)=[0x5, 0x8000, 0x8, 0x0, 0x6a2, 0xffff, 0xf9b6, 0xb1, 0xff, 0x0], &(0x7f00000001c0)=[0x3d0e, 0x0, 0x7fffffff, 0x40, 0x20, 0x0, 0xff, 0x1, 0x8001], 0x0, 0x3}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000080)={0x1, 0x3, 0xffffffc1, 0xff, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x2148, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000280)) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x5}) 08:14:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x6}) 08:14:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000180)={0x0, &(0x7f0000000280)=""/191}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000340)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000140)={r7, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000180)={0x0, &(0x7f0000000280)=""/191}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000340)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000140)={r7, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) (async) 08:14:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x400000000001f, 0x70400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) 08:14:16 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x0, 0x32) 08:14:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x6}) 08:14:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r7) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x0, r6, 0x100cd5}) ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f00000000c0)={0x0, 0x2}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000180)={0x1, 0xfffffffffffffff8}) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, &(0x7f0000000280)={0x1000, 0x6}) 08:14:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r7) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x0, r6, 0x100cd5}) ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f00000000c0)={0x0, 0x2}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:16 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x0, 0x32) 08:14:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0x400002, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r1}) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x1000, &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)={r2}) 08:14:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x6}) 08:14:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000180)={0x0, &(0x7f0000000280)=""/191}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000340)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000140)={r7, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000180)={0x0, &(0x7f0000000280)=""/191}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000340)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000140)={r7, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) (async) 08:14:16 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x6001, 0x0) 08:14:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0x400002, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r1}) (async) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x1000, &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)={r2}) 08:14:16 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) 08:14:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x1, 0x4b, 0x80000000, 0x3], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x4, 0x8, 0x6b6b6b6b}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0xff, 0x6, 0x0, 0xe753, 0x6f, 0x0, 0x3f, 0x6, 0x20], &(0x7f0000000200)=[0x0], 0x9, 0x101}) r1 = syz_open_dev$dri(&(0x7f0000000140), 0xd4, 0x454042) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000280)={0x7, 0x0, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x13}) 08:14:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x3, r1}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000200)={r2, 0x3}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000280)=r3) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000140)) 08:14:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0x400002, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r1}) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x1000, &(0x7f0000000180)=0x4) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)={r2}) 08:14:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x10001, 0x8744d2c9777ab11e) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000200)={r1, &(0x7f0000000100)=""/239}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x20002004, 0x4, 0x2}) 08:14:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r7) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x0, r6, 0x100cd5}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x3, r1}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000200)={r2, 0x3}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000280)=r3) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000140)) 08:14:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x1, 0x4b, 0x80000000, 0x3], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x4, 0x8, 0x6b6b6b6b}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0xff, 0x6, 0x0, 0xe753, 0x6f, 0x0, 0x3f, 0x6, 0x20], &(0x7f0000000200)=[0x0], 0x9, 0x101}) (async) r1 = syz_open_dev$dri(&(0x7f0000000140), 0xd4, 0x454042) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000280)={0x7, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x13}) 08:14:16 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) 08:14:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r7) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x0, r6, 0x100cd5}) ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f00000000c0)={0x0, 0x2}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f0000000080)=0xf20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x3, r1}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000200)={r2, 0x3}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000280)=r3) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000140)) 08:14:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x1, 0x4b, 0x80000000, 0x3], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x4, 0x8, 0x6b6b6b6b}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0xff, 0x6, 0x0, 0xe753, 0x6f, 0x0, 0x3f, 0x6, 0x20], &(0x7f0000000200)=[0x0], 0x9, 0x101}) (async) r1 = syz_open_dev$dri(&(0x7f0000000140), 0xd4, 0x454042) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000280)={0x7, 0x0, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x13}) 08:14:16 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) 08:14:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x6, 0xa2feb62}) 08:14:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x3, r1}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000200)={r2, 0x3}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000280)=r3) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) 08:14:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f0000000080)=0xf20) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:17 executing program 4: ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"0ecbe2f7e0a704c9448998d8ab36d4d3e537920e6c1d8ca49984b7e1c9a2d0d3"}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r6) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x6, 0xa2feb62}) 08:14:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f0000000080)=0xf20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x3, r1}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000200)={r2, 0x3}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000280)=r3) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x1) (async, rerun: 32) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (rerun: 32) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f0000000080)=0xf20) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x6, 0xa2feb62}) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x6, 0xa2feb62}) (async) 08:14:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x3, r1}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000200)={r2, 0x3}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000280)=r3) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f0000000080)=0xf20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:17 executing program 4: ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"0ecbe2f7e0a704c9448998d8ab36d4d3e537920e6c1d8ca49984b7e1c9a2d0d3"}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"0ecbe2f7e0a704c9448998d8ab36d4d3e537920e6c1d8ca49984b7e1c9a2d0d3"}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) 08:14:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:17 executing program 4: ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"0ecbe2f7e0a704c9448998d8ab36d4d3e537920e6c1d8ca49984b7e1c9a2d0d3"}) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x6, 0x8, 0x9, 0x7f, 0x6, 0x6, 0x1], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x7, 0xdededede}) 08:14:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x3, r1}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000200)={r2, 0x3}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r6) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x23, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2004, 0x4, 0x8}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x9, 0x4) 08:14:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x23, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2004, 0x4, 0x8}) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async, rerun: 32) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x9, 0x4) (rerun: 32) 08:14:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x6, 0x8, 0x9, 0x7f, 0x6, 0x6, 0x1], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x7, 0xdededede}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x6, 0x8, 0x9, 0x7f, 0x6, 0x6, 0x1], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x7, 0xdededede}) (async) 08:14:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x80) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x3, r1}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000200)={r2, 0x3}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x6, 0x8, 0x9, 0x7f, 0x6, 0x6, 0x1], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x7, 0xdededede}) 08:14:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x23, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2004, 0x4, 0x8}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x9, 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x23, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2004, 0x4, 0x8}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x9, 0x4) (async) 08:14:17 executing program 5: ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0xe6], 0x2, 0x800, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f00000001c0)={r2}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x6, 0x1}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r8, 0xcd5, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r9, 0x0, r4, 0xed5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x4004, 0x5}) 08:14:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x80) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r6) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x3, r1}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000200)={r2, 0x3}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x3, r1}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000200)={r2, 0x3}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:17 executing program 5: ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0xe6], 0x2, 0x800, 0x0}) (rerun: 64) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f00000001c0)={r2}) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x6, 0x1}) (async, rerun: 64) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async, rerun: 64) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 32) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) (async, rerun: 32) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (rerun: 32) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r8, 0xcd5, 0x80000}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r9) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r9, 0x0, r4, 0xed5, 0x80000}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x4004, 0x5}) 08:14:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x3, r1}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{}]}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x80) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) 08:14:18 executing program 5: ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0xe6], 0x2, 0x800, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f00000001c0)={r2}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x6, 0x1}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r8, 0xcd5, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r9, 0x0, r4, 0xed5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x4004, 0x5}) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0xe6], 0x2, 0x800}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f00000001c0)={r2}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x6, 0x1}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r8, 0xcd5, 0x80000}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000c40)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r9) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r9, 0x0, r4, 0xed5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x4004, 0x5}) (async) 08:14:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r6) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x3, r1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x80, 0x280) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000140)) 08:14:18 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={r2, 0xffffffff, 0x1, 0xffffffff, 0xcc8, 0x5, 0x10000, 0x0, 0x1, 0x5, 0x4, 0x5}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f0000000340)={0x0, &(0x7f0000000280)=""/141}) r5 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f00000001c0)={0x7, @random="41ca098d3b6f"}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/clockevents', 0x2201, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r8, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000040)={0x4}) 08:14:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x80, 0x280) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x80, 0x280) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000140)) (async) 08:14:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:18 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/gspca_ov519', 0x90440, 0x44) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x80000000, 0xe85, 0x3, 0x8000, 0x4, 0x8, 0x7b9, 0x0, 0x7ff], 0x9, 0x80000}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:18 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={r2, 0xffffffff, 0x1, 0xffffffff, 0xcc8, 0x5, 0x10000, 0x0, 0x1, 0x5, 0x4, 0x5}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) (async, rerun: 32) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f0000000340)={0x0, &(0x7f0000000280)=""/141}) (async, rerun: 32) r5 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f00000001c0)={0x7, @random="41ca098d3b6f"}) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/clockevents', 0x2201, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r8, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000040)={0x4}) 08:14:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x80, 0x280) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x80, 0x280) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000140)) (async) 08:14:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:18 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/gspca_ov519', 0x90440, 0x44) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x80000000, 0xe85, 0x3, 0x8000, 0x4, 0x8, 0x7b9, 0x0, 0x7ff], 0x9, 0x80000}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/gspca_ov519', 0x90440, 0x44) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x80000000, 0xe85, 0x3, 0x8000, 0x4, 0x8, 0x7b9, 0x0, 0x7ff], 0x9, 0x80000}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) 08:14:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:18 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={r2, 0xffffffff, 0x1, 0xffffffff, 0xcc8, 0x5, 0x10000, 0x0, 0x1, 0x5, 0x4, 0x5}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f0000000340)={0x0, &(0x7f0000000280)=""/141}) r5 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f00000001c0)={0x7, @random="41ca098d3b6f"}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/clockevents', 0x2201, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r8, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000040)={0x4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={r2, 0xffffffff, 0x1, 0xffffffff, 0xcc8, 0x5, 0x10000, 0x0, 0x1, 0x5, 0x4, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f0000000340)={0x0, &(0x7f0000000280)=""/141}) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f00000001c0)={0x7, @random="41ca098d3b6f"}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/clockevents', 0x2201, 0x20) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r8, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000040)={0x4}) (async) 08:14:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x6, 0x8}) 08:14:18 executing program 3: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:18 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/gspca_ov519', 0x90440, 0x44) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x80000000, 0xe85, 0x3, 0x8000, 0x4, 0x8, 0x7b9, 0x0, 0x7ff], 0x9, 0x80000}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x7, 0xf42d}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x0, 0x7, 0x9}) 08:14:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x6, 0x8}) 08:14:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:18 executing program 3: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000280)={"b0d1c8171d7dda00d372cec846301240", 0x0, 0x0, {0x6, 0x7}, {0x8000000000000001, 0x5}, 0x3, [0xffffffff, 0x8000000000000001, 0x400, 0x6, 0x6, 0x7, 0xfffffffffffffff7, 0x300000000, 0x9, 0x80000001, 0xfffffffffffffeff, 0x400, 0xffffffffffffffff, 0x1, 0x50b2, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x1f, 0x3, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/119}) 08:14:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x7, 0xf42d}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x0, 0x7, 0x9}) 08:14:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x6, 0x8}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x6, 0x8}) (async) 08:14:18 executing program 3: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000280)={"b0d1c8171d7dda00d372cec846301240", 0x0, 0x0, {0x6, 0x7}, {0x8000000000000001, 0x5}, 0x3, [0xffffffff, 0x8000000000000001, 0x400, 0x6, 0x6, 0x7, 0xfffffffffffffff7, 0x300000000, 0x9, 0x80000001, 0xfffffffffffffeff, 0x400, 0xffffffffffffffff, 0x1, 0x50b2, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x1f, 0x3, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/119}) 08:14:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x7, 0xf42d}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x0, 0x7, 0x9}) 08:14:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:18 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2004, 0x4, 0x8}) 08:14:18 executing program 5: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000001c0), 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x428800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000040)={[0xd000, 0x4000, 0xf000, 0x3000], 0x1000, 0x8e, 0x4}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000002c0)={&(0x7f0000000200)=[0x0], &(0x7f0000000280)=[0x6], 0x9, 0x1, 0x5}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x9, 0x22142) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000340)={0x6, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000380)={r5, 0x3}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000180)=r6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000280)={"b0d1c8171d7dda00d372cec846301240", 0x0, 0x0, {0x6, 0x7}, {0x8000000000000001, 0x5}, 0x3, [0xffffffff, 0x8000000000000001, 0x400, 0x6, 0x6, 0x7, 0xfffffffffffffff7, 0x300000000, 0x9, 0x80000001, 0xfffffffffffffeff, 0x400, 0xffffffffffffffff, 0x1, 0x50b2, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x1f, 0x3, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/119}) 08:14:19 executing program 5: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000001c0), 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x428800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000040)={[0xd000, 0x4000, 0xf000, 0x3000], 0x1000, 0x8e, 0x4}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000002c0)={&(0x7f0000000200)=[0x0], &(0x7f0000000280)=[0x6], 0x9, 0x1, 0x5}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x9, 0x22142) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000340)={0x6, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000380)={r5, 0x3}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000180)=r6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000001c0), 0x2) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x428800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) (async) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000040)={[0xd000, 0x4000, 0xf000, 0x3000], 0x1000, 0x8e, 0x4}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000002c0)={&(0x7f0000000200)=[0x0], &(0x7f0000000280)=[0x6], 0x9, 0x1, 0x5}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0) (async) syz_open_dev$dri(&(0x7f0000000300), 0x9, 0x22142) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000340)={0x6, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000380)={r5, 0x3}) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000180)=r6) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) 08:14:19 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2004, 0x4, 0x8}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2004, 0x4, 0x8}) (async) 08:14:19 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:19 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, r0, {0x20}}, 0x18) 08:14:19 executing program 5: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000001c0), 0x2) (async) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x428800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000040)={[0xd000, 0x4000, 0xf000, 0x3000], 0x1000, 0x8e, 0x4}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000002c0)={&(0x7f0000000200)=[0x0], &(0x7f0000000280)=[0x6], 0x9, 0x1, 0x5}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0) (async, rerun: 64) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x9, 0x22142) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000340)={0x6, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000380)={r5, 0x3}) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000180)=r6) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (rerun: 64) 08:14:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2004, 0x4, 0x8}) 08:14:19 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, r0, {0x20}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, r0, {0x20}}, 0x18) (async) 08:14:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:19 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x4, &(0x7f0000000100)=0x2) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x2, 0x40, 0x7fffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x80400) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000180)=0x1, &(0x7f00000001c0)=0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000140)=0x800, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x2004, 0xb, 0xa}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={0x0, 0x8001, 0x5}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000240), 0x281000, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000280)={{0x4000, 0x3000, 0xa, 0x1, 0x97, 0x4, 0x9, 0x7, 0x3, 0xdf, 0x88, 0x99}, {0x6000, 0x4000, 0x9, 0x24, 0x7f, 0x20, 0x80, 0x7c, 0x81, 0x4, 0x81, 0x8c}, {0x4000, 0x1002, 0x10, 0x0, 0x81, 0x1, 0x94, 0x80, 0x81, 0x4, 0x2, 0x5}, {0x2, 0x1, 0xa, 0x3, 0x99, 0x7, 0x2, 0x1, 0x8, 0x0, 0x80, 0x7f}, {0x4, 0x3000, 0x3, 0x3f, 0x7f, 0x9, 0x9, 0x40, 0x2, 0x9, 0x2b}, {0x4, 0xd000, 0xd, 0x79, 0x58, 0x1f, 0x3f, 0xeb, 0x4f, 0x17, 0x3, 0x8}, {0x2000, 0x1000, 0xd, 0x4, 0x6, 0x8, 0x80, 0x1f, 0x4b, 0x9, 0x3, 0x1}, {0x4000, 0x0, 0x0, 0x81, 0x7f, 0x80, 0x8, 0x3, 0x2, 0x7f, 0xb4, 0x1}, {0x100000, 0x2f12}, {0x5000, 0x8}, 0x3805bbbe960b3ec5, 0x0, 0x0, 0x64008, 0x4, 0x4400, 0x2000, [0x6, 0x1f, 0x8000000000000000, 0x6]}) 08:14:19 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, r0, {0x20}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, r0, {0x20}}, 0x18) (async) 08:14:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x697, 0x7f, 0x3, 0x40, 0x7], 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:19 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) (async) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x4, &(0x7f0000000100)=0x2) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x2, 0x40, 0x7fffffff}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x80400) (async) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000180)=0x1, &(0x7f00000001c0)=0x4) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000140)=0x800, 0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x2004, 0xb, 0xa}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={0x0, 0x8001, 0x5}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000240), 0x281000, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000280)={{0x4000, 0x3000, 0xa, 0x1, 0x97, 0x4, 0x9, 0x7, 0x3, 0xdf, 0x88, 0x99}, {0x6000, 0x4000, 0x9, 0x24, 0x7f, 0x20, 0x80, 0x7c, 0x81, 0x4, 0x81, 0x8c}, {0x4000, 0x1002, 0x10, 0x0, 0x81, 0x1, 0x94, 0x80, 0x81, 0x4, 0x2, 0x5}, {0x2, 0x1, 0xa, 0x3, 0x99, 0x7, 0x2, 0x1, 0x8, 0x0, 0x80, 0x7f}, {0x4, 0x3000, 0x3, 0x3f, 0x7f, 0x9, 0x9, 0x40, 0x2, 0x9, 0x2b}, {0x4, 0xd000, 0xd, 0x79, 0x58, 0x1f, 0x3f, 0xeb, 0x4f, 0x17, 0x3, 0x8}, {0x2000, 0x1000, 0xd, 0x4, 0x6, 0x8, 0x80, 0x1f, 0x4b, 0x9, 0x3, 0x1}, {0x4000, 0x0, 0x0, 0x81, 0x7f, 0x80, 0x8, 0x3, 0x2, 0x7f, 0xb4, 0x1}, {0x100000, 0x2f12}, {0x5000, 0x8}, 0x3805bbbe960b3ec5, 0x0, 0x0, 0x64008, 0x4, 0x4400, 0x2000, [0x6, 0x1f, 0x8000000000000000, 0x6]}) 08:14:19 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x697, 0x7f, 0x3, 0x40, 0x7], 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x697, 0x7f, 0x3, 0x40, 0x7], 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:19 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0x400], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x0, 0x8}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={r2}) 08:14:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:19 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x4, &(0x7f0000000100)=0x2) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x2, 0x40, 0x7fffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x80400) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000180)=0x1, &(0x7f00000001c0)=0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000140)=0x800, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x2004, 0xb, 0xa}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={0x0, 0x8001, 0x5}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000240), 0x281000, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000280)={{0x4000, 0x3000, 0xa, 0x1, 0x97, 0x4, 0x9, 0x7, 0x3, 0xdf, 0x88, 0x99}, {0x6000, 0x4000, 0x9, 0x24, 0x7f, 0x20, 0x80, 0x7c, 0x81, 0x4, 0x81, 0x8c}, {0x4000, 0x1002, 0x10, 0x0, 0x81, 0x1, 0x94, 0x80, 0x81, 0x4, 0x2, 0x5}, {0x2, 0x1, 0xa, 0x3, 0x99, 0x7, 0x2, 0x1, 0x8, 0x0, 0x80, 0x7f}, {0x4, 0x3000, 0x3, 0x3f, 0x7f, 0x9, 0x9, 0x40, 0x2, 0x9, 0x2b}, {0x4, 0xd000, 0xd, 0x79, 0x58, 0x1f, 0x3f, 0xeb, 0x4f, 0x17, 0x3, 0x8}, {0x2000, 0x1000, 0xd, 0x4, 0x6, 0x8, 0x80, 0x1f, 0x4b, 0x9, 0x3, 0x1}, {0x4000, 0x0, 0x0, 0x81, 0x7f, 0x80, 0x8, 0x3, 0x2, 0x7f, 0xb4, 0x1}, {0x100000, 0x2f12}, {0x5000, 0x8}, 0x3805bbbe960b3ec5, 0x0, 0x0, 0x64008, 0x4, 0x4400, 0x2000, [0x6, 0x1f, 0x8000000000000000, 0x6]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) (async) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x4, &(0x7f0000000100)=0x2) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x2, 0x40, 0x7fffffff}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x80400) (async) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000180)=0x1, &(0x7f00000001c0)=0x4) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000140)=0x800, 0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x2004, 0xb, 0xa}) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={0x0, 0x8001, 0x5}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000240), 0x281000, 0x0) (async) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000280)={{0x4000, 0x3000, 0xa, 0x1, 0x97, 0x4, 0x9, 0x7, 0x3, 0xdf, 0x88, 0x99}, {0x6000, 0x4000, 0x9, 0x24, 0x7f, 0x20, 0x80, 0x7c, 0x81, 0x4, 0x81, 0x8c}, {0x4000, 0x1002, 0x10, 0x0, 0x81, 0x1, 0x94, 0x80, 0x81, 0x4, 0x2, 0x5}, {0x2, 0x1, 0xa, 0x3, 0x99, 0x7, 0x2, 0x1, 0x8, 0x0, 0x80, 0x7f}, {0x4, 0x3000, 0x3, 0x3f, 0x7f, 0x9, 0x9, 0x40, 0x2, 0x9, 0x2b}, {0x4, 0xd000, 0xd, 0x79, 0x58, 0x1f, 0x3f, 0xeb, 0x4f, 0x17, 0x3, 0x8}, {0x2000, 0x1000, 0xd, 0x4, 0x6, 0x8, 0x80, 0x1f, 0x4b, 0x9, 0x3, 0x1}, {0x4000, 0x0, 0x0, 0x81, 0x7f, 0x80, 0x8, 0x3, 0x2, 0x7f, 0xb4, 0x1}, {0x100000, 0x2f12}, {0x5000, 0x8}, 0x3805bbbe960b3ec5, 0x0, 0x0, 0x64008, 0x4, 0x4400, 0x2000, [0x6, 0x1f, 0x8000000000000000, 0x6]}) (async) 08:14:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x1a3600) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000140)) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180)={0x10}, 0x10) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x3250}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x14}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:19 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0x400], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x0, 0x8}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={r2}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0x400], 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x0, 0x8}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={r2}) (async) 08:14:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x1a3600) (async, rerun: 64) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000140)) (rerun: 64) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180)={0x10}, 0x10) (async, rerun: 32) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x3250}) (async, rerun: 32) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x14}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 08:14:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:19 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x4, 0x2}) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={0x0, 0x6, 0x1, 0x7fffffff, 0x4}) 08:14:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0x400], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x0, 0x8}) (async, rerun: 32) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) (rerun: 32) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={r2}) 08:14:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x1a3600) (async, rerun: 32) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000140)) (rerun: 32) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180)={0x10}, 0x10) (async) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x3250}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x14}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 08:14:20 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x4, 0x2}) (async) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={0x0, 0x6, 0x1, 0x7fffffff, 0x4}) 08:14:20 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x4, 0x2}) (async, rerun: 32) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 32) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={0x0, 0x6, 0x1, 0x7fffffff, 0x4}) 08:14:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x4080, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) read$FUSE(r7, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$fuse(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000044c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r9]) mount$fuseblk(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x1000, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x101}}, {@blksize={'blksize', 0x3d, 0x3e00}}], [{@uid_gt={'uid>', 0xee01}}]}}) r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r10, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000140)={r11, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 08:14:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000040)) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xfffffffb, 0x40000000, 0x101}) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) 08:14:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x111880) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000001c0)) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x7ff, 0x5bd, 0xd4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000180)={r7}) 08:14:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)) 08:14:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) [ 1304.150686][ T3188] fuse: Bad value for 'user_id' 08:14:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000040)) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xfffffffb, 0x40000000, 0x101}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) 08:14:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x111880) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000000c0)={r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 64) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000001c0)) (async, rerun: 32) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x7ff, 0x5bd, 0xd4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000180)={r7}) 08:14:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x4080, 0x0) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) (async) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) read$FUSE(r7, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$fuse(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000044c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r9]) mount$fuseblk(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x1000, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x101}}, {@blksize={'blksize', 0x3d, 0x3e00}}], [{@uid_gt={'uid>', 0xee01}}]}}) (async) r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r10, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000140)={r11, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:20 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x1a3600) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000140)) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180)={0x10}, 0x10) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x3250}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x14}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000040)) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xfffffffb, 0x40000000, 0x101}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) [ 1304.328962][ T3210] fuse: Bad value for 'user_id' 08:14:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x1a3600) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000140)) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180)={0x10}, 0x10) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x3250}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x14}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x111880) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000001c0)) (async) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x7ff, 0x5bd, 0xd4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000180)={r7}) 08:14:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async, rerun: 64) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x4080, 0x0) (async, rerun: 64) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 64) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) read$FUSE(r7, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$fuse(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000044c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r9]) (async) mount$fuseblk(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x1000, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x101}}, {@blksize={'blksize', 0x3d, 0x3e00}}], [{@uid_gt={'uid>', 0xee01}}]}}) (async) r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r10, 0xcd5, 0x80000}) (async, rerun: 64) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0}]}) (rerun: 64) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000140)={r11, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:20 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040), 0x7, 0x82242) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0xc, 0x20}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/bluetooth_6lowpan', 0x200, 0x84) 08:14:20 executing program 1: r0 = syz_open_dev$dri(0x0, 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x1a3600) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000140)) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180)={0x10}, 0x10) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x3250}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x14}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:20 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:20 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040), 0x7, 0x82242) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0xc, 0x20}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/bluetooth_6lowpan', 0x200, 0x84) 08:14:20 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r4, 0x69, 0x1, 0xfff, 0x8, 0x0, 0xffff8000, 0x8, 0x76bc, 0x81, 0x80000001, 0x69e}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0), 0x0, 0x800}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000280)={0x8, 0x0, 0x6, 0x20, 0x4, "52d379783ab0447f"}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000240)={r6, 0x9, 0x7, 0x8, 0x10001, 0x4, 0x8471, 0x18000000, 0x3, 0x3, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:20 executing program 1: r0 = syz_open_dev$dri(0x0, 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x1a3600) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000140)) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180)={0x10}, 0x10) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x3250}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:20 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) (async, rerun: 32) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 32) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r4, 0x69, 0x1, 0xfff, 0x8, 0x0, 0xffff8000, 0x8, 0x76bc, 0x81, 0x80000001, 0x69e}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0), 0x0, 0x800}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) (rerun: 64) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000280)={0x8, 0x0, 0x6, 0x20, 0x4, "52d379783ab0447f"}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000240)={r6, 0x9, 0x7, 0x8, 0x10001, 0x4, 0x8471, 0x18000000, 0x3, 0x3, 0x2, 0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:20 executing program 1: r0 = syz_open_dev$dri(0x0, 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:20 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) 08:14:20 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040), 0x7, 0x82242) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0xc, 0x20}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/bluetooth_6lowpan', 0x200, 0x84) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) syz_open_dev$audion(&(0x7f0000000040), 0x7, 0x82242) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0xc, 0x20}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/bluetooth_6lowpan', 0x200, 0x84) (async) 08:14:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101001) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x1a3600) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000140)) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180)={0x10}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000140)={0x7, 0x6, &(0x7f0000000040)=[0x3, 0x0, 0x7, 0x2d0d, 0x1, 0x886], &(0x7f0000000080)=[0x2, 0x8, 0x400, 0x800, 0x2, 0x8ef], &(0x7f00000000c0)=[0x1, 0x7, 0xfff, 0xfff9, 0x7f, 0x20, 0x400, 0xffff, 0x80]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0]}) 08:14:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:21 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x1a3600) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000140)) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:21 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r4, 0x69, 0x1, 0xfff, 0x8, 0x0, 0xffff8000, 0x8, 0x76bc, 0x81, 0x80000001, 0x69e}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0), 0x0, 0x800}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000280)={0x8, 0x0, 0x6, 0x20, 0x4, "52d379783ab0447f"}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000240)={r6, 0x9, 0x7, 0x8, 0x10001, 0x4, 0x8471, 0x18000000, 0x3, 0x3, 0x2, 0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000140)={0x7, 0x6, &(0x7f0000000040)=[0x3, 0x0, 0x7, 0x2d0d, 0x1, 0x886], &(0x7f0000000080)=[0x2, 0x8, 0x400, 0x800, 0x2, 0x8ef], &(0x7f00000000c0)=[0x1, 0x7, 0xfff, 0xfff9, 0x7f, 0x20, 0x400, 0xffff, 0x80]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0]}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x2, 0x8}) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000140)={0x7, 0x6, &(0x7f0000000040)=[0x3, 0x0, 0x7, 0x2d0d, 0x1, 0x886], &(0x7f0000000080)=[0x2, 0x8, 0x400, 0x800, 0x2, 0x8ef], &(0x7f00000000c0)=[0x1, 0x7, 0xfff, 0xfff9, 0x7f, 0x20, 0x400, 0xffff, 0x80]}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0]}) (async) 08:14:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x1) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x1a3600) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:21 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x1) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x2, 0x8}) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000140)={0x7, 0x6, &(0x7f0000000040)=[0x3, 0x0, 0x7, 0x2d0d, 0x1, 0x886], &(0x7f0000000080)=[0x2, 0x8, 0x400, 0x800, 0x2, 0x8ef], &(0x7f00000000c0)=[0x1, 0x7, 0xfff, 0xfff9, 0x7f, 0x20, 0x400, 0xffff, 0x80]}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0]}) 08:14:21 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:21 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x1a3600) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x2004, 0x4, 0x6}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0xdfb}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000180)={0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) 08:14:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x1) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x1) (async) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) 08:14:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0xa, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) accept4$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x800) 08:14:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x2004, 0x4, 0x6}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) (async) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0xdfb}) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000180)={0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) 08:14:21 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:21 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0xa, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) accept4$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x800) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0xa, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) (async) accept4$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x800) (async) 08:14:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="a8aab7b686ff04bd60ce7af6fe80aeb12a60ee98d505b6775d3a0dc791e72cbb0e7697b7e71d9e8f108e9fb7b35b29b75a26dba63b24054b8b379ed7730f75289a9e70e8e3eaa41326b58b494cc6c58a95489cf6cac5aad015a5620f20fa50cec29ec9053c9e43a5d911d4fafe3e7bdb04911835441304f0181e8206a4a1c5cb9acccfd96760b56071bbc70404e66c127021d5674b76dda22eacad8805fc852d841dd848be3b08de882fd45b9533053943beb603b1682655d962d2d1651baee2441e0ecc2ae159071c448ea72f26d5b4978e419eca08aa94319f28f48f7e6dae6c6148d372d9e117a21a4222ca3a5bf5b33333e3189129a81f7f4772054c5fa61520252c2035aaaa807bf21b88ebd68e7ae603365f6380685ebbc164b44051e041b4002ee51c99f2b98e5c51bab323e05db45fe79b675ec9c91dc456e9ad103ad57f49a80ac87f9fe2b3384ecd232494dbd11bba3cf537c70931082d8880e8d40520bc38b2fa1fa71db05c22f8ccd74b83e5a66d2bb249226e5789df00491beeb3aad91b83961e30cb444e3861a2a552cab74ebd1b89cca45f7257a96db5873abbca8d3c2579e8b27645aed36304957a9bf78d32a0f917e5ee05e210fb350e57f8e122bfd4bd744927f570a6a14b60d3ea657074400fd0a80842ff67d74c3ab5bc9cb0e2a51cc5d140c8b81a9f3833426a35fde36b032d337d85585e83920c4abec0dd85ee4987bfdca5f3583038221a45413c3adaf00a5fa06a4af3383af5335bb41d64d059343b52f71c1b9d24bf5624e70e8de3a3edc5807f97f496eb57afacb265f28be53feeb29fa80d24393819736cb3ad959dbc3b2dd3e8cfff56a7cd3e9388a1b941b29796842806ad36311334f4b8923e68727de12b78ee0a2487e6c11b9c8d8ac94159b00e0e3d3b290176158f50154088e2a9686a1bc248d7ca40f03a9f31a8c09cf259eabca470323f1c8258c05702cf49fd57d955cfceb4d3581965fccad1e39ef1f6c2ffe04e761013e9101667d2d9ae8c68a9fc15476716fb9fb93fd7d4f66f4164cf47044e445faad69204fb5983bef37ded50beae515969be1e0cc91e74e2b66351e1ed9188cc4f0974c48eee149f6121ae765974df1b6739540e661c34f827a42f127a1a0eee8cc19d53e86d7aed65db7aecac9a0ad22cb86cbb8067c4ba90e0c3a1612ef1e00ae3df967e83b48d5e6dfa11ad5983df4d399999d4e23f473db61fee71bbd6e521b342cae7053aa9115357e9dc47fe1772c735229eaed85b2c0c3e7c33a12e04e59a200237f4e8930a777564f8ea4b64d6f65f375bdebf28c45da0b8e8e56c6ba6120cf5db26df87a623621744245806453d3f907351217667aeb4fc4d9ba6ff563dc0d3277c1b060d487fa2002a6964c4bdc22c99fef10979d0b7e25db7edb9e1b2ee765b60a09aceb4bb79b4b9d57e1b"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="144ee26d35df8d14c7b2087d9ad34f324d5e9bd9f3240ac7a830afa85302770797c7f536c0bd6347e77578e7a81626cdff5e3a915e06527fe081ff478bfcb6822307399ad16ce8d3d8feff36526e6bafdb4d42878f5f2311e67bf23d783bba662954134205b84f2f9937bd75d65349bd44d6d1be49d4a2453e0b9b8d95d9aeaf5fdb137127badd113182a4b8e95f3b08f54f09c4a0cfe85552622c699e57447dfe7d96ac0136fc749f7746caa21ee1cd753789fc4dab87fc5b1024aeb737d739381d47c4989341c3b8ae7328ccffc8537d9c7dba3cf1c532cd4ca6fdef43d0cef9aa05397df899bcd6ad22b5a9e7adf518952b04a4bbf1f7ce913d319673d67fe90949a1381d07645fe7314af3f72b64ca878dfdb4ac488c40770e7c288c39fe04c3acb571d4a4f4d10eed8dcc0edb54fa67a5520b7ceb9e227cd653f10e1a25dd2aefd1f36158eb7ea05d166471ec880ecb2e2a6882d14402b52a1d15aeb4666c48d56a27d2bdfde2efb1374484ca13b11209398f3e621c515edcd425ea66271e3704478d8001c7b8dde8045d484ebeb83bc6e3287f8c851e15923413702a526b25422543a25553a774fef1c368fea4dcc2966112f1eb3b7a3b7a74f9811f8c501ecf1c7270e902f68e01d5930131fb22b31000956f72a93adce4978e5e3cdac3b7d6fab64e58317528f28f453b115dbb8569a3676758ed3c3cbb8e2d04c9c8c3e3b74f1b57d2b98ae8b494495191268f2893216abe68186878f00008c1decbd5c3ad863cc4ae13e55b8412eac32b6ef54346edd4899065ba166eab79a38bd68fe8b3c861df97347fed9979828d61d0d0835085d3286b7563bdb42f2068df00d6f0386409f59698f60b33c4f065e002c50821c88e319a662d9197043abc8c62dba748caf6f2864a91ca4685ea4cb8658559c9634edfffe149b725740114ca72c5f1d6984f115365841e4be5a37e20059fadacd18567b33bcf9ab1772c7ece27f8ef049b196221857238b051c7433e646322dc19f014b5280d921c97ae41b091d6362538bb7380a42cde94cef7c9673229cc7b76ca9ea4ab94a29190e78ab810db52326bda63dcf86482075dad0ed23e004de005fba3542ec9ae976bcc218bca43d6ed2bb5ac8120c7dba1bcffd0145c68537ee97802f67c608b597455ba922418fa7cc3e66e456612dccc18922698a36cbbec588452d765c5bc1e30ec590d4bda192588a2db8ccb5d9508a8274bccaa8864eeec115282d71005875b502a64e5c571be939c33266b741a1f6412151187c981fa5447e191a8c7681d389304719590752abdc4a7cb7e82a7cd8ae5ed9cd83ef41c3e1b2055551bae3b609357e58d4d7518d3a34364962b80d2f6fcf7928039012993da7c7e72e44f0cd63c2d6a5d9b686a6999f1dc6e06f69679dffd0069cc9d194db748f89fb9be13a83e211cd2"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x1, 0x28b}) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000002740), 0x2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000025c0)={0x0}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000002bc0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000002600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000026c0)={&(0x7f0000002640)=[0x0, r3, 0x0, 0x0, r4, 0x0], &(0x7f0000002680)=[0x6184, 0x3, 0x7, 0x8, 0x0, 0xffff, 0x90ce], 0x80000000, 0x6}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000002700)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000030c0)={&(0x7f0000000580)=[0x5, 0x2, 0x2, 0x5, 0x9d], 0x5, 0x81800}) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, 0x0) 08:14:21 executing program 0: r0 = syz_open_dev$dri(0x0, 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:21 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x2004, 0x4, 0x6}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0xdfb}) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000180)={0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) 08:14:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="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"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x1, 0x28b}) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000002740), 0x2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000025c0)={0x0}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000002bc0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000002600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000026c0)={&(0x7f0000002640)=[0x0, r3, 0x0, 0x0, r4, 0x0], &(0x7f0000002680)=[0x6184, 0x3, 0x7, 0x8, 0x0, 0xffff, 0x90ce], 0x80000000, 0x6}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000002700)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000030c0)={&(0x7f0000000580)=[0x5, 0x2, 0x2, 0x5, 0x9d], 0x5, 0x81800}) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) (async) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) (async) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="144ee26d35df8d14c7b2087d9ad34f324d5e9bd9f3240ac7a830afa85302770797c7f536c0bd6347e77578e7a81626cdff5e3a915e06527fe081ff478bfcb6822307399ad16ce8d3d8feff36526e6bafdb4d42878f5f2311e67bf23d783bba662954134205b84f2f9937bd75d65349bd44d6d1be49d4a2453e0b9b8d95d9aeaf5fdb137127badd113182a4b8e95f3b08f54f09c4a0cfe85552622c699e57447dfe7d96ac0136fc749f7746caa21ee1cd753789fc4dab87fc5b1024aeb737d739381d47c4989341c3b8ae7328ccffc8537d9c7dba3cf1c532cd4ca6fdef43d0cef9aa05397df899bcd6ad22b5a9e7adf518952b04a4bbf1f7ce913d319673d67fe90949a1381d07645fe7314af3f72b64ca878dfdb4ac488c40770e7c288c39fe04c3acb571d4a4f4d10eed8dcc0edb54fa67a5520b7ceb9e227cd653f10e1a25dd2aefd1f36158eb7ea05d166471ec880ecb2e2a6882d14402b52a1d15aeb4666c48d56a27d2bdfde2efb1374484ca13b11209398f3e621c515edcd425ea66271e3704478d8001c7b8dde8045d484ebeb83bc6e3287f8c851e15923413702a526b25422543a25553a774fef1c368fea4dcc2966112f1eb3b7a3b7a74f9811f8c501ecf1c7270e902f68e01d5930131fb22b31000956f72a93adce4978e5e3cdac3b7d6fab64e58317528f28f453b115dbb8569a3676758ed3c3cbb8e2d04c9c8c3e3b74f1b57d2b98ae8b494495191268f2893216abe68186878f00008c1decbd5c3ad863cc4ae13e55b8412eac32b6ef54346edd4899065ba166eab79a38bd68fe8b3c861df97347fed9979828d61d0d0835085d3286b7563bdb42f2068df00d6f0386409f59698f60b33c4f065e002c50821c88e319a662d9197043abc8c62dba748caf6f2864a91ca4685ea4cb8658559c9634edfffe149b725740114ca72c5f1d6984f115365841e4be5a37e20059fadacd18567b33bcf9ab1772c7ece27f8ef049b196221857238b051c7433e646322dc19f014b5280d921c97ae41b091d6362538bb7380a42cde94cef7c9673229cc7b76ca9ea4ab94a29190e78ab810db52326bda63dcf86482075dad0ed23e004de005fba3542ec9ae976bcc218bca43d6ed2bb5ac8120c7dba1bcffd0145c68537ee97802f67c608b597455ba922418fa7cc3e66e456612dccc18922698a36cbbec588452d765c5bc1e30ec590d4bda192588a2db8ccb5d9508a8274bccaa8864eeec115282d71005875b502a64e5c571be939c33266b741a1f6412151187c981fa5447e191a8c7681d389304719590752abdc4a7cb7e82a7cd8ae5ed9cd83ef41c3e1b2055551bae3b609357e58d4d7518d3a34364962b80d2f6fcf7928039012993da7c7e72e44f0cd63c2d6a5d9b686a6999f1dc6e06f69679dffd0069cc9d194db748f89fb9be13a83e211cd2"}) (async) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) (async) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020}, 0x2020) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x1, 0x28b}) (async) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000002740), 0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000025c0)) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000002bc0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000002600)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000026c0)={&(0x7f0000002640)=[0x0, r3, 0x0, 0x0, r4, 0x0], &(0x7f0000002680)=[0x6184, 0x3, 0x7, 0x8, 0x0, 0xffff, 0x90ce], 0x80000000, 0x6}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000002700)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000030c0)={&(0x7f0000000580)=[0x5, 0x2, 0x2, 0x5, 0x9d], 0x5, 0x81800}) (async) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) (async) 08:14:21 executing program 0: r0 = syz_open_dev$dri(0x0, 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0xa, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) accept4$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x800) 08:14:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, 0x0) 08:14:21 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)=0x7) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:21 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:21 executing program 0: r0 = syz_open_dev$dri(0x0, 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, 0x0) 08:14:21 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0x1a3600) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="144ee26d35df8d14c7b2087d9ad34f324d5e9bd9f3240ac7a830afa85302770797c7f536c0bd6347e77578e7a81626cdff5e3a915e06527fe081ff478bfcb6822307399ad16ce8d3d8feff36526e6bafdb4d42878f5f2311e67bf23d783bba662954134205b84f2f9937bd75d65349bd44d6d1be49d4a2453e0b9b8d95d9aeaf5fdb137127badd113182a4b8e95f3b08f54f09c4a0cfe85552622c699e57447dfe7d96ac0136fc749f7746caa21ee1cd753789fc4dab87fc5b1024aeb737d739381d47c4989341c3b8ae7328ccffc8537d9c7dba3cf1c532cd4ca6fdef43d0cef9aa05397df899bcd6ad22b5a9e7adf518952b04a4bbf1f7ce913d319673d67fe90949a1381d07645fe7314af3f72b64ca878dfdb4ac488c40770e7c288c39fe04c3acb571d4a4f4d10eed8dcc0edb54fa67a5520b7ceb9e227cd653f10e1a25dd2aefd1f36158eb7ea05d166471ec880ecb2e2a6882d14402b52a1d15aeb4666c48d56a27d2bdfde2efb1374484ca13b11209398f3e621c515edcd425ea66271e3704478d8001c7b8dde8045d484ebeb83bc6e3287f8c851e15923413702a526b25422543a25553a774fef1c368fea4dcc2966112f1eb3b7a3b7a74f9811f8c501ecf1c7270e902f68e01d5930131fb22b31000956f72a93adce4978e5e3cdac3b7d6fab64e58317528f28f453b115dbb8569a3676758ed3c3cbb8e2d04c9c8c3e3b74f1b57d2b98ae8b494495191268f2893216abe68186878f00008c1decbd5c3ad863cc4ae13e55b8412eac32b6ef54346edd4899065ba166eab79a38bd68fe8b3c861df97347fed9979828d61d0d0835085d3286b7563bdb42f2068df00d6f0386409f59698f60b33c4f065e002c50821c88e319a662d9197043abc8c62dba748caf6f2864a91ca4685ea4cb8658559c9634edfffe149b725740114ca72c5f1d6984f115365841e4be5a37e20059fadacd18567b33bcf9ab1772c7ece27f8ef049b196221857238b051c7433e646322dc19f014b5280d921c97ae41b091d6362538bb7380a42cde94cef7c9673229cc7b76ca9ea4ab94a29190e78ab810db52326bda63dcf86482075dad0ed23e004de005fba3542ec9ae976bcc218bca43d6ed2bb5ac8120c7dba1bcffd0145c68537ee97802f67c608b597455ba922418fa7cc3e66e456612dccc18922698a36cbbec588452d765c5bc1e30ec590d4bda192588a2db8ccb5d9508a8274bccaa8864eeec115282d71005875b502a64e5c571be939c33266b741a1f6412151187c981fa5447e191a8c7681d389304719590752abdc4a7cb7e82a7cd8ae5ed9cd83ef41c3e1b2055551bae3b609357e58d4d7518d3a34364962b80d2f6fcf7928039012993da7c7e72e44f0cd63c2d6a5d9b686a6999f1dc6e06f69679dffd0069cc9d194db748f89fb9be13a83e211cd2"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x1, 0x28b}) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000002740), 0x2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000025c0)={0x0}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000002bc0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000002600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000026c0)={&(0x7f0000002640)=[0x0, r3, 0x0, 0x0, r4, 0x0], &(0x7f0000002680)=[0x6184, 0x3, 0x7, 0x8, 0x0, 0xffff, 0x90ce], 0x80000000, 0x6}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000002700)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000030c0)={&(0x7f0000000580)=[0x5, 0x2, 0x2, 0x5, 0x9d], 0x5, 0x81800}) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) (async) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) (async) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="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"}) (async) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) (async) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020}, 0x2020) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x1, 0x28b}) (async) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000002740), 0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000025c0)) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000002bc0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000002600)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000026c0)={&(0x7f0000002640)=[0x0, r3, 0x0, 0x0, r4, 0x0], &(0x7f0000002680)=[0x6184, 0x3, 0x7, 0x8, 0x0, 0xffff, 0x90ce], 0x80000000, 0x6}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000002700)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000030c0)={&(0x7f0000000580)=[0x5, 0x2, 0x2, 0x5, 0x9d], 0x5, 0x81800}) (async) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) (async) 08:14:21 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101001) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:21 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0x1a3600) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)=0x7) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)={0x0, 0x6c2c}) 08:14:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000280)={0x0, 0x1400}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0x10c02, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r5, 0xcd5, 0x80000}) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000002c0), 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000140), &(0x7f0000000300)=0x4) 08:14:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)=0x7) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:22 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0x1a3600) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:22 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)) 08:14:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1a3600) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:22 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x1, 0x212103) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000040)={0x6, 0x7}) write$cgroup_devices(r1, &(0x7f0000000080)={'a', ' *:* ', 'r\x00'}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000140)={0x5}) 08:14:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 32) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f00000000c0)) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000280)={0x0, 0x1400}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) (async) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0x10c02, 0x0) (async, rerun: 64) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r5, 0xcd5, 0x80000}) (async) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000002c0), 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000140), &(0x7f0000000300)=0x4) 08:14:22 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="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"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x1, 0x28b}) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000002740), 0x2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000025c0)={0x0}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000002bc0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000002600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000026c0)={&(0x7f0000002640)=[0x0, r3, 0x0, 0x0, r4, 0x0], &(0x7f0000002680)=[0x6184, 0x3, 0x7, 0x8, 0x0, 0xffff, 0x90ce], 0x80000000, 0x6}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000002700)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000030c0)={&(0x7f0000000580)=[0x5, 0x2, 0x2, 0x5, 0x9d], 0x5, 0x81800}) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:22 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x1, 0x212103) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000040)={0x6, 0x7}) (async) write$cgroup_devices(r1, &(0x7f0000000080)={'a', ' *:* ', 'r\x00'}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000140)={0x5}) 08:14:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x5, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) 08:14:22 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="a8aab7b686ff04bd60ce7af6fe80aeb12a60ee98d505b6775d3a0dc791e72cbb0e7697b7e71d9e8f108e9fb7b35b29b75a26dba63b24054b8b379ed7730f75289a9e70e8e3eaa41326b58b494cc6c58a95489cf6cac5aad015a5620f20fa50cec29ec9053c9e43a5d911d4fafe3e7bdb04911835441304f0181e8206a4a1c5cb9acccfd96760b56071bbc70404e66c127021d5674b76dda22eacad8805fc852d841dd848be3b08de882fd45b9533053943beb603b1682655d962d2d1651baee2441e0ecc2ae159071c448ea72f26d5b4978e419eca08aa94319f28f48f7e6dae6c6148d372d9e117a21a4222ca3a5bf5b33333e3189129a81f7f4772054c5fa61520252c2035aaaa807bf21b88ebd68e7ae603365f6380685ebbc164b44051e041b4002ee51c99f2b98e5c51bab323e05db45fe79b675ec9c91dc456e9ad103ad57f49a80ac87f9fe2b3384ecd232494dbd11bba3cf537c70931082d8880e8d40520bc38b2fa1fa71db05c22f8ccd74b83e5a66d2bb249226e5789df00491beeb3aad91b83961e30cb444e3861a2a552cab74ebd1b89cca45f7257a96db5873abbca8d3c2579e8b27645aed36304957a9bf78d32a0f917e5ee05e210fb350e57f8e122bfd4bd744927f570a6a14b60d3ea657074400fd0a80842ff67d74c3ab5bc9cb0e2a51cc5d140c8b81a9f3833426a35fde36b032d337d85585e83920c4abec0dd85ee4987bfdca5f3583038221a45413c3adaf00a5fa06a4af3383af5335bb41d64d059343b52f71c1b9d24bf5624e70e8de3a3edc5807f97f496eb57afacb265f28be53feeb29fa80d24393819736cb3ad959dbc3b2dd3e8cfff56a7cd3e9388a1b941b29796842806ad36311334f4b8923e68727de12b78ee0a2487e6c11b9c8d8ac94159b00e0e3d3b290176158f50154088e2a9686a1bc248d7ca40f03a9f31a8c09cf259eabca470323f1c8258c05702cf49fd57d955cfceb4d3581965fccad1e39ef1f6c2ffe04e761013e9101667d2d9ae8c68a9fc15476716fb9fb93fd7d4f66f4164cf47044e445faad69204fb5983bef37ded50beae515969be1e0cc91e74e2b66351e1ed9188cc4f0974c48eee149f6121ae765974df1b6739540e661c34f827a42f127a1a0eee8cc19d53e86d7aed65db7aecac9a0ad22cb86cbb8067c4ba90e0c3a1612ef1e00ae3df967e83b48d5e6dfa11ad5983df4d399999d4e23f473db61fee71bbd6e521b342cae7053aa9115357e9dc47fe1772c735229eaed85b2c0c3e7c33a12e04e59a200237f4e8930a777564f8ea4b64d6f65f375bdebf28c45da0b8e8e56c6ba6120cf5db26df87a623621744245806453d3f907351217667aeb4fc4d9ba6ff563dc0d3277c1b060d487fa2002a6964c4bdc22c99fef10979d0b7e25db7edb9e1b2ee765b60a09aceb4bb79b4b9d57e1b"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="144ee26d35df8d14c7b2087d9ad34f324d5e9bd9f3240ac7a830afa85302770797c7f536c0bd6347e77578e7a81626cdff5e3a915e06527fe081ff478bfcb6822307399ad16ce8d3d8feff36526e6bafdb4d42878f5f2311e67bf23d783bba662954134205b84f2f9937bd75d65349bd44d6d1be49d4a2453e0b9b8d95d9aeaf5fdb137127badd113182a4b8e95f3b08f54f09c4a0cfe85552622c699e57447dfe7d96ac0136fc749f7746caa21ee1cd753789fc4dab87fc5b1024aeb737d739381d47c4989341c3b8ae7328ccffc8537d9c7dba3cf1c532cd4ca6fdef43d0cef9aa05397df899bcd6ad22b5a9e7adf518952b04a4bbf1f7ce913d319673d67fe90949a1381d07645fe7314af3f72b64ca878dfdb4ac488c40770e7c288c39fe04c3acb571d4a4f4d10eed8dcc0edb54fa67a5520b7ceb9e227cd653f10e1a25dd2aefd1f36158eb7ea05d166471ec880ecb2e2a6882d14402b52a1d15aeb4666c48d56a27d2bdfde2efb1374484ca13b11209398f3e621c515edcd425ea66271e3704478d8001c7b8dde8045d484ebeb83bc6e3287f8c851e15923413702a526b25422543a25553a774fef1c368fea4dcc2966112f1eb3b7a3b7a74f9811f8c501ecf1c7270e902f68e01d5930131fb22b31000956f72a93adce4978e5e3cdac3b7d6fab64e58317528f28f453b115dbb8569a3676758ed3c3cbb8e2d04c9c8c3e3b74f1b57d2b98ae8b494495191268f2893216abe68186878f00008c1decbd5c3ad863cc4ae13e55b8412eac32b6ef54346edd4899065ba166eab79a38bd68fe8b3c861df97347fed9979828d61d0d0835085d3286b7563bdb42f2068df00d6f0386409f59698f60b33c4f065e002c50821c88e319a662d9197043abc8c62dba748caf6f2864a91ca4685ea4cb8658559c9634edfffe149b725740114ca72c5f1d6984f115365841e4be5a37e20059fadacd18567b33bcf9ab1772c7ece27f8ef049b196221857238b051c7433e646322dc19f014b5280d921c97ae41b091d6362538bb7380a42cde94cef7c9673229cc7b76ca9ea4ab94a29190e78ab810db52326bda63dcf86482075dad0ed23e004de005fba3542ec9ae976bcc218bca43d6ed2bb5ac8120c7dba1bcffd0145c68537ee97802f67c608b597455ba922418fa7cc3e66e456612dccc18922698a36cbbec588452d765c5bc1e30ec590d4bda192588a2db8ccb5d9508a8274bccaa8864eeec115282d71005875b502a64e5c571be939c33266b741a1f6412151187c981fa5447e191a8c7681d389304719590752abdc4a7cb7e82a7cd8ae5ed9cd83ef41c3e1b2055551bae3b609357e58d4d7518d3a34364962b80d2f6fcf7928039012993da7c7e72e44f0cd63c2d6a5d9b686a6999f1dc6e06f69679dffd0069cc9d194db748f89fb9be13a83e211cd2"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x1, 0x28b}) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000002740), 0x2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000025c0)={0x0}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000002bc0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000002600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000026c0)={&(0x7f0000002640)=[0x0, r3, 0x0, 0x0, r4, 0x0], &(0x7f0000002680)=[0x6184, 0x3, 0x7, 0x8, 0x0, 0xffff, 0x90ce], 0x80000000, 0x6}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000002700)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000030c0)={&(0x7f0000000580)=[0x5, 0x2, 0x2, 0x5, 0x9d], 0x5, 0x81800}) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:22 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000280)={0x0, 0x1400}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) (async) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0x10c02, 0x0) (async, rerun: 32) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r5, 0xcd5, 0x80000}) (async) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000002c0), 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000140), &(0x7f0000000300)=0x4) 08:14:22 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x5, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x1, 0x212103) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000040)={0x6, 0x7}) write$cgroup_devices(r1, &(0x7f0000000080)={'a', ' *:* ', 'r\x00'}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000140)={0x5}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) syz_open_dev$audion(&(0x7f00000000c0), 0x1, 0x212103) (async) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000040)={0x6, 0x7}) (async) write$cgroup_devices(r1, &(0x7f0000000080)={'a', ' *:* ', 'r\x00'}, 0x8) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000140)={0x5}) (async) 08:14:22 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:22 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="a8aab7b686ff04bd60ce7af6fe80aeb12a60ee98d505b6775d3a0dc791e72cbb0e7697b7e71d9e8f108e9fb7b35b29b75a26dba63b24054b8b379ed7730f75289a9e70e8e3eaa41326b58b494cc6c58a95489cf6cac5aad015a5620f20fa50cec29ec9053c9e43a5d911d4fafe3e7bdb04911835441304f0181e8206a4a1c5cb9acccfd96760b56071bbc70404e66c127021d5674b76dda22eacad8805fc852d841dd848be3b08de882fd45b9533053943beb603b1682655d962d2d1651baee2441e0ecc2ae159071c448ea72f26d5b4978e419eca08aa94319f28f48f7e6dae6c6148d372d9e117a21a4222ca3a5bf5b33333e3189129a81f7f4772054c5fa61520252c2035aaaa807bf21b88ebd68e7ae603365f6380685ebbc164b44051e041b4002ee51c99f2b98e5c51bab323e05db45fe79b675ec9c91dc456e9ad103ad57f49a80ac87f9fe2b3384ecd232494dbd11bba3cf537c70931082d8880e8d40520bc38b2fa1fa71db05c22f8ccd74b83e5a66d2bb249226e5789df00491beeb3aad91b83961e30cb444e3861a2a552cab74ebd1b89cca45f7257a96db5873abbca8d3c2579e8b27645aed36304957a9bf78d32a0f917e5ee05e210fb350e57f8e122bfd4bd744927f570a6a14b60d3ea657074400fd0a80842ff67d74c3ab5bc9cb0e2a51cc5d140c8b81a9f3833426a35fde36b032d337d85585e83920c4abec0dd85ee4987bfdca5f3583038221a45413c3adaf00a5fa06a4af3383af5335bb41d64d059343b52f71c1b9d24bf5624e70e8de3a3edc5807f97f496eb57afacb265f28be53feeb29fa80d24393819736cb3ad959dbc3b2dd3e8cfff56a7cd3e9388a1b941b29796842806ad36311334f4b8923e68727de12b78ee0a2487e6c11b9c8d8ac94159b00e0e3d3b290176158f50154088e2a9686a1bc248d7ca40f03a9f31a8c09cf259eabca470323f1c8258c05702cf49fd57d955cfceb4d3581965fccad1e39ef1f6c2ffe04e761013e9101667d2d9ae8c68a9fc15476716fb9fb93fd7d4f66f4164cf47044e445faad69204fb5983bef37ded50beae515969be1e0cc91e74e2b66351e1ed9188cc4f0974c48eee149f6121ae765974df1b6739540e661c34f827a42f127a1a0eee8cc19d53e86d7aed65db7aecac9a0ad22cb86cbb8067c4ba90e0c3a1612ef1e00ae3df967e83b48d5e6dfa11ad5983df4d399999d4e23f473db61fee71bbd6e521b342cae7053aa9115357e9dc47fe1772c735229eaed85b2c0c3e7c33a12e04e59a200237f4e8930a777564f8ea4b64d6f65f375bdebf28c45da0b8e8e56c6ba6120cf5db26df87a623621744245806453d3f907351217667aeb4fc4d9ba6ff563dc0d3277c1b060d487fa2002a6964c4bdc22c99fef10979d0b7e25db7edb9e1b2ee765b60a09aceb4bb79b4b9d57e1b"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="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"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x1, 0x28b}) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000002740), 0x2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000025c0)={0x0}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000002bc0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000002600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000026c0)={&(0x7f0000002640)=[0x0, r3, 0x0, 0x0, r4, 0x0], &(0x7f0000002680)=[0x6184, 0x3, 0x7, 0x8, 0x0, 0xffff, 0x90ce], 0x80000000, 0x6}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000002700)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000030c0)={&(0x7f0000000580)=[0x5, 0x2, 0x2, 0x5, 0x9d], 0x5, 0x81800}) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, 0x0) 08:14:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000080)={0x10}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x4, 0x0, 0x2}) 08:14:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000080)={r1, &(0x7f0000000140)=""/135}) 08:14:22 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:22 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002100)='/sys/block/loop4', 0x400, 0x3c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x2007, 0x3ff, 0x15b31e36}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000002140)={0x0, 0x80000}) syz_open_dev$dri(&(0x7f0000002180), 0x5, 0x331000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000021c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f00000020c0)={0x10, 0x0, r5}, 0x10) 08:14:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, 0x0) 08:14:22 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="a8aab7b686ff04bd60ce7af6fe80aeb12a60ee98d505b6775d3a0dc791e72cbb0e7697b7e71d9e8f108e9fb7b35b29b75a26dba63b24054b8b379ed7730f75289a9e70e8e3eaa41326b58b494cc6c58a95489cf6cac5aad015a5620f20fa50cec29ec9053c9e43a5d911d4fafe3e7bdb04911835441304f0181e8206a4a1c5cb9acccfd96760b56071bbc70404e66c127021d5674b76dda22eacad8805fc852d841dd848be3b08de882fd45b9533053943beb603b1682655d962d2d1651baee2441e0ecc2ae159071c448ea72f26d5b4978e419eca08aa94319f28f48f7e6dae6c6148d372d9e117a21a4222ca3a5bf5b33333e3189129a81f7f4772054c5fa61520252c2035aaaa807bf21b88ebd68e7ae603365f6380685ebbc164b44051e041b4002ee51c99f2b98e5c51bab323e05db45fe79b675ec9c91dc456e9ad103ad57f49a80ac87f9fe2b3384ecd232494dbd11bba3cf537c70931082d8880e8d40520bc38b2fa1fa71db05c22f8ccd74b83e5a66d2bb249226e5789df00491beeb3aad91b83961e30cb444e3861a2a552cab74ebd1b89cca45f7257a96db5873abbca8d3c2579e8b27645aed36304957a9bf78d32a0f917e5ee05e210fb350e57f8e122bfd4bd744927f570a6a14b60d3ea657074400fd0a80842ff67d74c3ab5bc9cb0e2a51cc5d140c8b81a9f3833426a35fde36b032d337d85585e83920c4abec0dd85ee4987bfdca5f3583038221a45413c3adaf00a5fa06a4af3383af5335bb41d64d059343b52f71c1b9d24bf5624e70e8de3a3edc5807f97f496eb57afacb265f28be53feeb29fa80d24393819736cb3ad959dbc3b2dd3e8cfff56a7cd3e9388a1b941b29796842806ad36311334f4b8923e68727de12b78ee0a2487e6c11b9c8d8ac94159b00e0e3d3b290176158f50154088e2a9686a1bc248d7ca40f03a9f31a8c09cf259eabca470323f1c8258c05702cf49fd57d955cfceb4d3581965fccad1e39ef1f6c2ffe04e761013e9101667d2d9ae8c68a9fc15476716fb9fb93fd7d4f66f4164cf47044e445faad69204fb5983bef37ded50beae515969be1e0cc91e74e2b66351e1ed9188cc4f0974c48eee149f6121ae765974df1b6739540e661c34f827a42f127a1a0eee8cc19d53e86d7aed65db7aecac9a0ad22cb86cbb8067c4ba90e0c3a1612ef1e00ae3df967e83b48d5e6dfa11ad5983df4d399999d4e23f473db61fee71bbd6e521b342cae7053aa9115357e9dc47fe1772c735229eaed85b2c0c3e7c33a12e04e59a200237f4e8930a777564f8ea4b64d6f65f375bdebf28c45da0b8e8e56c6ba6120cf5db26df87a623621744245806453d3f907351217667aeb4fc4d9ba6ff563dc0d3277c1b060d487fa2002a6964c4bdc22c99fef10979d0b7e25db7edb9e1b2ee765b60a09aceb4bb79b4b9d57e1b"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="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"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x1, 0x28b}) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000002740), 0x2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000025c0)={0x0}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000002bc0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000002600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000026c0)={&(0x7f0000002640)=[0x0, r3, 0x0, 0x0, r4, 0x0], &(0x7f0000002680)=[0x6184, 0x3, 0x7, 0x8, 0x0, 0xffff, 0x90ce], 0x80000000, 0x6}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000002700)) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async, rerun: 32) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 32) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000080)={0x10}) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x4, 0x0, 0x2}) (rerun: 64) 08:14:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000080)={r1, &(0x7f0000000140)=""/135}) 08:14:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 08:14:22 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002100)='/sys/block/loop4', 0x400, 0x3c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x2007, 0x3ff, 0x15b31e36}) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 32) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000002140)={0x0, 0x80000}) (async) syz_open_dev$dri(&(0x7f0000002180), 0x5, 0x331000) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000021c0)) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f00000020c0)={0x10, 0x0, r5}, 0x10) 08:14:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, 0x0) 08:14:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 08:14:22 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="a8aab7b686ff04bd60ce7af6fe80aeb12a60ee98d505b6775d3a0dc791e72cbb0e7697b7e71d9e8f108e9fb7b35b29b75a26dba63b24054b8b379ed7730f75289a9e70e8e3eaa41326b58b494cc6c58a95489cf6cac5aad015a5620f20fa50cec29ec9053c9e43a5d911d4fafe3e7bdb04911835441304f0181e8206a4a1c5cb9acccfd96760b56071bbc70404e66c127021d5674b76dda22eacad8805fc852d841dd848be3b08de882fd45b9533053943beb603b1682655d962d2d1651baee2441e0ecc2ae159071c448ea72f26d5b4978e419eca08aa94319f28f48f7e6dae6c6148d372d9e117a21a4222ca3a5bf5b33333e3189129a81f7f4772054c5fa61520252c2035aaaa807bf21b88ebd68e7ae603365f6380685ebbc164b44051e041b4002ee51c99f2b98e5c51bab323e05db45fe79b675ec9c91dc456e9ad103ad57f49a80ac87f9fe2b3384ecd232494dbd11bba3cf537c70931082d8880e8d40520bc38b2fa1fa71db05c22f8ccd74b83e5a66d2bb249226e5789df00491beeb3aad91b83961e30cb444e3861a2a552cab74ebd1b89cca45f7257a96db5873abbca8d3c2579e8b27645aed36304957a9bf78d32a0f917e5ee05e210fb350e57f8e122bfd4bd744927f570a6a14b60d3ea657074400fd0a80842ff67d74c3ab5bc9cb0e2a51cc5d140c8b81a9f3833426a35fde36b032d337d85585e83920c4abec0dd85ee4987bfdca5f3583038221a45413c3adaf00a5fa06a4af3383af5335bb41d64d059343b52f71c1b9d24bf5624e70e8de3a3edc5807f97f496eb57afacb265f28be53feeb29fa80d24393819736cb3ad959dbc3b2dd3e8cfff56a7cd3e9388a1b941b29796842806ad36311334f4b8923e68727de12b78ee0a2487e6c11b9c8d8ac94159b00e0e3d3b290176158f50154088e2a9686a1bc248d7ca40f03a9f31a8c09cf259eabca470323f1c8258c05702cf49fd57d955cfceb4d3581965fccad1e39ef1f6c2ffe04e761013e9101667d2d9ae8c68a9fc15476716fb9fb93fd7d4f66f4164cf47044e445faad69204fb5983bef37ded50beae515969be1e0cc91e74e2b66351e1ed9188cc4f0974c48eee149f6121ae765974df1b6739540e661c34f827a42f127a1a0eee8cc19d53e86d7aed65db7aecac9a0ad22cb86cbb8067c4ba90e0c3a1612ef1e00ae3df967e83b48d5e6dfa11ad5983df4d399999d4e23f473db61fee71bbd6e521b342cae7053aa9115357e9dc47fe1772c735229eaed85b2c0c3e7c33a12e04e59a200237f4e8930a777564f8ea4b64d6f65f375bdebf28c45da0b8e8e56c6ba6120cf5db26df87a623621744245806453d3f907351217667aeb4fc4d9ba6ff563dc0d3277c1b060d487fa2002a6964c4bdc22c99fef10979d0b7e25db7edb9e1b2ee765b60a09aceb4bb79b4b9d57e1b"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="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"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x1, 0x28b}) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000002740), 0x2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000025c0)={0x0}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000002bc0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000002600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000026c0)={&(0x7f0000002640)=[0x0, r3, 0x0, 0x0, r4, 0x0], &(0x7f0000002680)=[0x6184, 0x3, 0x7, 0x8, 0x0, 0xffff, 0x90ce], 0x80000000, 0x6}) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async, rerun: 32) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) (rerun: 32) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000080)={r1, &(0x7f0000000140)=""/135}) 08:14:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000080)={0x10}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x4, 0x0, 0x2}) 08:14:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)={0x0, 0x6c2c}) 08:14:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 08:14:23 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="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"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x1, 0x28b}) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000002740), 0x2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000025c0)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000002bc0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000002600)) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:23 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002100)='/sys/block/loop4', 0x400, 0x3c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x2007, 0x3ff, 0x15b31e36}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000002140)={0x0, 0x80000}) syz_open_dev$dri(&(0x7f0000002180), 0x5, 0x331000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000021c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f00000020c0)={0x10, 0x0, r5}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000002100)='/sys/block/loop4', 0x400, 0x3c) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x2007, 0x3ff, 0x15b31e36}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000002140)={0x0, 0x80000}) (async) syz_open_dev$dri(&(0x7f0000002180), 0x5, 0x331000) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000021c0)) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) (async) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f00000020c0)={0x10, 0x0, r5}, 0x10) (async) 08:14:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000040)={0x5, 0x20f7e7dd, 0x2, 0x1f, 0x3f}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000240)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, '\x00', 0x4, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2004, 0x8, 0x8}) 08:14:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000040)={0x9, 0x3, 0x4}) 08:14:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)) 08:14:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x4000006, 0x801fc}) 08:14:23 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="144ee26d35df8d14c7b2087d9ad34f324d5e9bd9f3240ac7a830afa85302770797c7f536c0bd6347e77578e7a81626cdff5e3a915e06527fe081ff478bfcb6822307399ad16ce8d3d8feff36526e6bafdb4d42878f5f2311e67bf23d783bba662954134205b84f2f9937bd75d65349bd44d6d1be49d4a2453e0b9b8d95d9aeaf5fdb137127badd113182a4b8e95f3b08f54f09c4a0cfe85552622c699e57447dfe7d96ac0136fc749f7746caa21ee1cd753789fc4dab87fc5b1024aeb737d739381d47c4989341c3b8ae7328ccffc8537d9c7dba3cf1c532cd4ca6fdef43d0cef9aa05397df899bcd6ad22b5a9e7adf518952b04a4bbf1f7ce913d319673d67fe90949a1381d07645fe7314af3f72b64ca878dfdb4ac488c40770e7c288c39fe04c3acb571d4a4f4d10eed8dcc0edb54fa67a5520b7ceb9e227cd653f10e1a25dd2aefd1f36158eb7ea05d166471ec880ecb2e2a6882d14402b52a1d15aeb4666c48d56a27d2bdfde2efb1374484ca13b11209398f3e621c515edcd425ea66271e3704478d8001c7b8dde8045d484ebeb83bc6e3287f8c851e15923413702a526b25422543a25553a774fef1c368fea4dcc2966112f1eb3b7a3b7a74f9811f8c501ecf1c7270e902f68e01d5930131fb22b31000956f72a93adce4978e5e3cdac3b7d6fab64e58317528f28f453b115dbb8569a3676758ed3c3cbb8e2d04c9c8c3e3b74f1b57d2b98ae8b494495191268f2893216abe68186878f00008c1decbd5c3ad863cc4ae13e55b8412eac32b6ef54346edd4899065ba166eab79a38bd68fe8b3c861df97347fed9979828d61d0d0835085d3286b7563bdb42f2068df00d6f0386409f59698f60b33c4f065e002c50821c88e319a662d9197043abc8c62dba748caf6f2864a91ca4685ea4cb8658559c9634edfffe149b725740114ca72c5f1d6984f115365841e4be5a37e20059fadacd18567b33bcf9ab1772c7ece27f8ef049b196221857238b051c7433e646322dc19f014b5280d921c97ae41b091d6362538bb7380a42cde94cef7c9673229cc7b76ca9ea4ab94a29190e78ab810db52326bda63dcf86482075dad0ed23e004de005fba3542ec9ae976bcc218bca43d6ed2bb5ac8120c7dba1bcffd0145c68537ee97802f67c608b597455ba922418fa7cc3e66e456612dccc18922698a36cbbec588452d765c5bc1e30ec590d4bda192588a2db8ccb5d9508a8274bccaa8864eeec115282d71005875b502a64e5c571be939c33266b741a1f6412151187c981fa5447e191a8c7681d389304719590752abdc4a7cb7e82a7cd8ae5ed9cd83ef41c3e1b2055551bae3b609357e58d4d7518d3a34364962b80d2f6fcf7928039012993da7c7e72e44f0cd63c2d6a5d9b686a6999f1dc6e06f69679dffd0069cc9d194db748f89fb9be13a83e211cd2"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x1, 0x28b}) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000002740), 0x2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000025c0)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000002bc0)) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000040)={0x5, 0x20f7e7dd, 0x2, 0x1f, 0x3f}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000240)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, '\x00', 0x4, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2004, 0x8, 0x8}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000040)={0x5, 0x20f7e7dd, 0x2, 0x1f, 0x3f}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000240)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, '\x00', 0x4, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2004, 0x8, 0x8}) (async) 08:14:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000040)={0x5, 0x20f7e7dd, 0x2, 0x1f, 0x3f}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000240)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, '\x00', 0x4, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2004, 0x8, 0x8}) 08:14:23 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r1, 0x0, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="906cadbc97b2e2e9ac5a38004517c9d6af4121b75fe63a99d8d4f9d7621745ece04096aeddc0218eb2631054f1a00749bd0d84d8a158962d", @ANYRES16=r2, @ANYBLOB="20002bbd7000fddbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="05000f001f0000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) 08:14:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000040)={0x9, 0x3, 0x4}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000040)={0x9, 0x3, 0x4}) (async) 08:14:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x4000006, 0x801fc}) 08:14:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000040)={0x5, 0x20f7e7dd, 0x2, 0x1f, 0x3f}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000240)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, '\x00', 0x4, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2004, 0x8, 0x8}) 08:14:23 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="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"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x1, 0x28b}) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000002740), 0x2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000025c0)={0x0}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000002bc0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000002600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000026c0)={&(0x7f0000002640)=[0x0, r3, 0x0, 0x0, r4, 0x0], &(0x7f0000002680)=[0x6184, 0x3, 0x7, 0x8, 0x0, 0xffff, 0x90ce], 0x80000000, 0x6}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000002700)) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000040)={0x9, 0x3, 0x4}) 08:14:23 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="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"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x1, 0x28b}) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000002740), 0x2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000025c0)) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:23 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r1, 0x0, 0x0) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="906cadbc97b2e2e9ac5a38004517c9d6af4121b75fe63a99d8d4f9d7621745ece04096aeddc0218eb2631054f1a00749bd0d84d8a158962d", @ANYRES16=r2, @ANYBLOB="20002bbd7000fddbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="05000f001f0000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) 08:14:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x4000006, 0x801fc}) 08:14:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x13, 0x1b, 0x59, &(0x7f0000000140)}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) getgroups(0x2, &(0x7f0000000540)=[0x0, 0xffffffffffffffff]) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}, {@default_permissions}, {@allow_other}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, ']'}}, {@uid_gt={'uid>', 0xee01}}, {@obj_type={'obj_type', 0x3d, '/dev/dri/card#\x00'}}, {@dont_hash}, {@measure}]}}) 08:14:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x4, 0x8001, 0xffff, 0x3f, 0x4, 0x0, 0x7}) 08:14:23 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r1, 0x0, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="906cadbc97b2e2e9ac5a38004517c9d6af4121b75fe63a99d8d4f9d7621745ece04096aeddc0218eb2631054f1a00749bd0d84d8a158962d", @ANYRES16=r2, @ANYBLOB="20002bbd7000fddbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="05000f001f0000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NET_DM_CMD_STOP(r0, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NET_DM_CMD_STOP(r1, 0x0, 0x0) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="906cadbc97b2e2e9ac5a38004517c9d6af4121b75fe63a99d8d4f9d7621745ece04096aeddc0218eb2631054f1a00749bd0d84d8a158962d", @ANYRES16=r2, @ANYBLOB="20002bbd7000fddbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="05000f001f0000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) (async) 08:14:23 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r1, 0x0, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="906cadbc97b2e2e9ac5a38004517c9d6af4121b75fe63a99d8d4f9d7621745ece04096aeddc0218eb2631054f1a00749bd0d84d8a158962d", @ANYRES16=r2, @ANYBLOB="20002bbd7000fddbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="05000f001f0000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) 08:14:23 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="144ee26d35df8d14c7b2087d9ad34f324d5e9bd9f3240ac7a830afa85302770797c7f536c0bd6347e77578e7a81626cdff5e3a915e06527fe081ff478bfcb6822307399ad16ce8d3d8feff36526e6bafdb4d42878f5f2311e67bf23d783bba662954134205b84f2f9937bd75d65349bd44d6d1be49d4a2453e0b9b8d95d9aeaf5fdb137127badd113182a4b8e95f3b08f54f09c4a0cfe85552622c699e57447dfe7d96ac0136fc749f7746caa21ee1cd753789fc4dab87fc5b1024aeb737d739381d47c4989341c3b8ae7328ccffc8537d9c7dba3cf1c532cd4ca6fdef43d0cef9aa05397df899bcd6ad22b5a9e7adf518952b04a4bbf1f7ce913d319673d67fe90949a1381d07645fe7314af3f72b64ca878dfdb4ac488c40770e7c288c39fe04c3acb571d4a4f4d10eed8dcc0edb54fa67a5520b7ceb9e227cd653f10e1a25dd2aefd1f36158eb7ea05d166471ec880ecb2e2a6882d14402b52a1d15aeb4666c48d56a27d2bdfde2efb1374484ca13b11209398f3e621c515edcd425ea66271e3704478d8001c7b8dde8045d484ebeb83bc6e3287f8c851e15923413702a526b25422543a25553a774fef1c368fea4dcc2966112f1eb3b7a3b7a74f9811f8c501ecf1c7270e902f68e01d5930131fb22b31000956f72a93adce4978e5e3cdac3b7d6fab64e58317528f28f453b115dbb8569a3676758ed3c3cbb8e2d04c9c8c3e3b74f1b57d2b98ae8b494495191268f2893216abe68186878f00008c1decbd5c3ad863cc4ae13e55b8412eac32b6ef54346edd4899065ba166eab79a38bd68fe8b3c861df97347fed9979828d61d0d0835085d3286b7563bdb42f2068df00d6f0386409f59698f60b33c4f065e002c50821c88e319a662d9197043abc8c62dba748caf6f2864a91ca4685ea4cb8658559c9634edfffe149b725740114ca72c5f1d6984f115365841e4be5a37e20059fadacd18567b33bcf9ab1772c7ece27f8ef049b196221857238b051c7433e646322dc19f014b5280d921c97ae41b091d6362538bb7380a42cde94cef7c9673229cc7b76ca9ea4ab94a29190e78ab810db52326bda63dcf86482075dad0ed23e004de005fba3542ec9ae976bcc218bca43d6ed2bb5ac8120c7dba1bcffd0145c68537ee97802f67c608b597455ba922418fa7cc3e66e456612dccc18922698a36cbbec588452d765c5bc1e30ec590d4bda192588a2db8ccb5d9508a8274bccaa8864eeec115282d71005875b502a64e5c571be939c33266b741a1f6412151187c981fa5447e191a8c7681d389304719590752abdc4a7cb7e82a7cd8ae5ed9cd83ef41c3e1b2055551bae3b609357e58d4d7518d3a34364962b80d2f6fcf7928039012993da7c7e72e44f0cd63c2d6a5d9b686a6999f1dc6e06f69679dffd0069cc9d194db748f89fb9be13a83e211cd2"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x1, 0x28b}) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000002740), 0x2) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x13, 0x1b, 0x59, &(0x7f0000000140)}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) getgroups(0x2, &(0x7f0000000540)=[0x0, 0xffffffffffffffff]) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}, {@default_permissions}, {@allow_other}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, ']'}}, {@uid_gt={'uid>', 0xee01}}, {@obj_type={'obj_type', 0x3d, '/dev/dri/card#\x00'}}, {@dont_hash}, {@measure}]}}) 08:14:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x0, 0x801fc}) 08:14:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x4, 0x8001, 0xffff, 0x3f, 0x4, 0x0, 0x7}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x4, 0x8001, 0xffff, 0x3f, 0x4, 0x0, 0x7}) (async) 08:14:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:23 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="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"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x1, 0x28b}) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x0, 0x801fc}) 08:14:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x13, 0x1b, 0x59, &(0x7f0000000140)}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 64) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async, rerun: 64) getgroups(0x2, &(0x7f0000000540)=[0x0, 0xffffffffffffffff]) (rerun: 64) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}, {@default_permissions}, {@allow_other}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, ']'}}, {@uid_gt={'uid>', 0xee01}}, {@obj_type={'obj_type', 0x3d, '/dev/dri/card#\x00'}}, {@dont_hash}, {@measure}]}}) 08:14:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r3}) 08:14:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x4, 0x8001, 0xffff, 0x3f, 0x4, 0x0, 0x7}) (rerun: 64) 08:14:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0xa, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) accept4$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x800) 08:14:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x0, 0x801fc}) 08:14:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r3}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r3}) (async) 08:14:23 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="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"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020}, 0x2020) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:23 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r4, 0x69, 0x1, 0xfff, 0x8, 0x0, 0xffff8000, 0x8, 0x76bc, 0x81, 0x80000001, 0x69e}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0), 0x0, 0x800}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000280)={0x8, 0x0, 0x6, 0x20, 0x4, "52d379783ab0447f"}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000240)={r6, 0x9, 0x7, 0x8, 0x10001, 0x4, 0x8471, 0x18000000, 0x3, 0x3, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r3}) 08:14:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006}) 08:14:23 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="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"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x5a], 0x1, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0xfffff800, 0xffff, 0x2, 0x1, 0xb310, 0x3, 0x100, 0x101, 0x4, 0x8, 0x8000}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) 08:14:24 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r4, 0x69, 0x1, 0xfff, 0x8, 0x0, 0xffff8000, 0x8, 0x76bc, 0x81, 0x80000001, 0x69e}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0), 0x0, 0x800}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000280)={0x8, 0x0, 0x6, 0x20, 0x4, "52d379783ab0447f"}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000240)={r6, 0x9, 0x7, 0x8, 0x10001, 0x4, 0x8471, 0x18000000, 0x3, 0x3, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x1a3600) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000140)) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180)={0x10}, 0x10) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x3250}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x14}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006, 0x801fc}) 08:14:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) socket$pppl2tp(0x18, 0x1, 0x1) 08:14:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006}) 08:14:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x5a], 0x1, 0x80000}) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) (rerun: 32) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0xfffff800, 0xffff, 0x2, 0x1, 0xb310, 0x3, 0x100, 0x101, 0x4, 0x8, 0x8000}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) (rerun: 64) 08:14:24 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="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"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000003040)=0x1) 08:14:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006}) 08:14:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x5a], 0x1, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0xfffff800, 0xffff, 0x2, 0x1, 0xb310, 0x3, 0x100, 0x101, 0x4, 0x8, 0x8000}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) 08:14:24 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r4, 0x69, 0x1, 0xfff, 0x8, 0x0, 0xffff8000, 0x8, 0x76bc, 0x81, 0x80000001, 0x69e}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0), 0x0, 0x800}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000280)={0x8, 0x0, 0x6, 0x20, 0x4, "52d379783ab0447f"}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000240)={r6, 0x9, 0x7, 0x8, 0x10001, 0x4, 0x8471, 0x18000000, 0x3, 0x3, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) 08:14:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x5a], 0x1, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0xfffff800, 0xffff, 0x2, 0x1, 0xb310, 0x3, 0x100, 0x101, 0x4, 0x8, 0x8000}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) 08:14:24 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="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"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000003040)=0x1) 08:14:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006}) 08:14:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) socket$pppl2tp(0x18, 0x1, 0x1) 08:14:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4000006}) 08:14:24 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r4, 0x69, 0x1, 0xfff, 0x8, 0x0, 0xffff8000, 0x8, 0x76bc, 0x81, 0x80000001, 0x69e}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0), 0x0, 0x800}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000280)={0x8, 0x0, 0x6, 0x20, 0x4, "52d379783ab0447f"}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000240)={r6, 0x9, 0x7, 0x8, 0x10001, 0x4, 0x8471, 0x18000000, 0x3, 0x3, 0x2, 0x3}) 08:14:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x103101) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1], 0x1, 0x800}) 08:14:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:24 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="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"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003100)) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000003040)=0x1) 08:14:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:24 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r4, 0x69, 0x1, 0xfff, 0x8, 0x0, 0xffff8000, 0x8, 0x76bc, 0x81, 0x80000001, 0x69e}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0), 0x0, 0x800}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000280)={0x8, 0x0, 0x6, 0x20, 0x4, "52d379783ab0447f"}) 08:14:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x103101) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x103101) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) 08:14:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1], 0x1, 0x800}) 08:14:24 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="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"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002580)={0x3f, 0x7f, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x103101) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:24 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r4, 0x69, 0x1, 0xfff, 0x8, 0x0, 0xffff8000, 0x8, 0x76bc, 0x81, 0x80000001, 0x69e}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0), 0x0, 0x800}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) 08:14:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1], 0x1, 0x800}) 08:14:24 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="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"}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1], 0x1, 0x800}) 08:14:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7fff, 0x80280) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x0, 0x1f}) 08:14:24 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r4, 0x69, 0x1, 0xfff, 0x8, 0x0, 0xffff8000, 0x8, 0x76bc, 0x81, 0x80000001, 0x69e}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0), 0x0, 0x800}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x4040, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000080)={0x3, 0x7, 0x6a91, 0x0, 0x1, 0xffffffff, 0xa7}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"b17d9d5f02456ab464df257475d76818a337f679319d79027e0ec73dd1e3063a", r1, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={0x0, 0x0, r2, 0x4, 0x80000}) 08:14:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x103101) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:24 executing program 3: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:24 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="a8aab7b686ff04bd60ce7af6fe80aeb12a60ee98d505b6775d3a0dc791e72cbb0e7697b7e71d9e8f108e9fb7b35b29b75a26dba63b24054b8b379ed7730f75289a9e70e8e3eaa41326b58b494cc6c58a95489cf6cac5aad015a5620f20fa50cec29ec9053c9e43a5d911d4fafe3e7bdb04911835441304f0181e8206a4a1c5cb9acccfd96760b56071bbc70404e66c127021d5674b76dda22eacad8805fc852d841dd848be3b08de882fd45b9533053943beb603b1682655d962d2d1651baee2441e0ecc2ae159071c448ea72f26d5b4978e419eca08aa94319f28f48f7e6dae6c6148d372d9e117a21a4222ca3a5bf5b33333e3189129a81f7f4772054c5fa61520252c2035aaaa807bf21b88ebd68e7ae603365f6380685ebbc164b44051e041b4002ee51c99f2b98e5c51bab323e05db45fe79b675ec9c91dc456e9ad103ad57f49a80ac87f9fe2b3384ecd232494dbd11bba3cf537c70931082d8880e8d40520bc38b2fa1fa71db05c22f8ccd74b83e5a66d2bb249226e5789df00491beeb3aad91b83961e30cb444e3861a2a552cab74ebd1b89cca45f7257a96db5873abbca8d3c2579e8b27645aed36304957a9bf78d32a0f917e5ee05e210fb350e57f8e122bfd4bd744927f570a6a14b60d3ea657074400fd0a80842ff67d74c3ab5bc9cb0e2a51cc5d140c8b81a9f3833426a35fde36b032d337d85585e83920c4abec0dd85ee4987bfdca5f3583038221a45413c3adaf00a5fa06a4af3383af5335bb41d64d059343b52f71c1b9d24bf5624e70e8de3a3edc5807f97f496eb57afacb265f28be53feeb29fa80d24393819736cb3ad959dbc3b2dd3e8cfff56a7cd3e9388a1b941b29796842806ad36311334f4b8923e68727de12b78ee0a2487e6c11b9c8d8ac94159b00e0e3d3b290176158f50154088e2a9686a1bc248d7ca40f03a9f31a8c09cf259eabca470323f1c8258c05702cf49fd57d955cfceb4d3581965fccad1e39ef1f6c2ffe04e761013e9101667d2d9ae8c68a9fc15476716fb9fb93fd7d4f66f4164cf47044e445faad69204fb5983bef37ded50beae515969be1e0cc91e74e2b66351e1ed9188cc4f0974c48eee149f6121ae765974df1b6739540e661c34f827a42f127a1a0eee8cc19d53e86d7aed65db7aecac9a0ad22cb86cbb8067c4ba90e0c3a1612ef1e00ae3df967e83b48d5e6dfa11ad5983df4d399999d4e23f473db61fee71bbd6e521b342cae7053aa9115357e9dc47fe1772c735229eaed85b2c0c3e7c33a12e04e59a200237f4e8930a777564f8ea4b64d6f65f375bdebf28c45da0b8e8e56c6ba6120cf5db26df87a623621744245806453d3f907351217667aeb4fc4d9ba6ff563dc0d3277c1b060d487fa2002a6964c4bdc22c99fef10979d0b7e25db7edb9e1b2ee765b60a09aceb4bb79b4b9d57e1b"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7fff, 0x80280) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x0, 0x1f}) 08:14:24 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r4, 0x69, 0x1, 0xfff, 0x8, 0x0, 0xffff8000, 0x8, 0x76bc, 0x81, 0x80000001, 0x69e}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0), 0x0, 0x800}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x4040, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000080)={0x3, 0x7, 0x6a91, 0x0, 0x1, 0xffffffff, 0xa7}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"b17d9d5f02456ab464df257475d76818a337f679319d79027e0ec73dd1e3063a", r1, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={0x0, 0x0, r2, 0x4, 0x80000}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x4040, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000080)={0x3, 0x7, 0x6a91, 0x0, 0x1, 0xffffffff, 0xa7}) (async) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"b17d9d5f02456ab464df257475d76818a337f679319d79027e0ec73dd1e3063a", r1}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={0x0, 0x0, r2, 0x4, 0x80000}) (async) 08:14:24 executing program 3: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:24 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x103101) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7fff, 0x80280) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x0, 0x1f}) syz_open_dev$dri(&(0x7f0000000000), 0x7fff, 0x80280) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x0, 0x1f}) (async) 08:14:25 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r4, 0x69, 0x1, 0xfff, 0x8, 0x0, 0xffff8000, 0x8, 0x76bc, 0x81, 0x80000001, 0x69e}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0), 0x0, 0x800}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x103101) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x4040, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000080)={0x3, 0x7, 0x6a91, 0x0, 0x1, 0xffffffff, 0xa7}) (async) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"b17d9d5f02456ab464df257475d76818a337f679319d79027e0ec73dd1e3063a", r1, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={0x0, 0x0, r2, 0x4, 0x80000}) 08:14:25 executing program 3: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:25 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:25 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r4, 0x69, 0x1, 0xfff, 0x8, 0x0, 0xffff8000, 0x8, 0x76bc, 0x81, 0x80000001, 0x69e}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0), 0x0, 0x800}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x5, 0x8}) 08:14:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x40a000) syz_open_dev$hiddev(&(0x7f0000000000), 0x5, 0x200) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x10}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:25 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x103101) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:25 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:25 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r4, 0x69, 0x1, 0xfff, 0x8, 0x0, 0xffff8000, 0x8, 0x76bc, 0x81, 0x80000001, 0x69e}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x5, 0x8}) 08:14:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x40a000) (async) syz_open_dev$hiddev(&(0x7f0000000000), 0x5, 0x200) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x10}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:25 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000003040)=0x1) 08:14:25 executing program 2: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:25 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80, 0x5, 0x8}) 08:14:25 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r2, 0x69, 0x1, 0xfff, 0x8, 0x0, 0xffff8000, 0x8, 0x76bc, 0x81, 0x80000001, 0x69e}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:25 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000003040)=0x1) 08:14:25 executing program 2: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x40a000) syz_open_dev$hiddev(&(0x7f0000000000), 0x5, 0x200) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x10}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x40a000) (async) syz_open_dev$hiddev(&(0x7f0000000000), 0x5, 0x200) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x10}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) 08:14:25 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:25 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:25 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x445, 0xffffffff}) 08:14:25 executing program 2: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:25 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000003040)=0x1) 08:14:25 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1f, 0x103101) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:25 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:25 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:25 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000003040)=0x1) 08:14:25 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000003040)=0x1) 08:14:25 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x445, 0xffffffff}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x445, 0xffffffff}) (async) 08:14:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000003040)=0x1) 08:14:25 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1f, 0x103101) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:25 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 64) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x445, 0xffffffff}) (rerun: 32) 08:14:25 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000240)={0x9}) 08:14:25 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:25 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:25 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000003040)=0x1) 08:14:25 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1f, 0x103101) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 08:14:25 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:25 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:25 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000003040)=0x1) 08:14:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x103101) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:25 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000000c0)={r1, &(0x7f0000000140)=""/252}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 08:14:26 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000003040)=0x1) 08:14:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x103101) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:26 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:26 executing program 0: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000003040)=0x1) 08:14:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000000c0)={r1, &(0x7f0000000140)=""/252}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x103101) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 08:14:26 executing program 0: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000000c0)={r1, &(0x7f0000000140)=""/252}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:26 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000003040)=0x1) 08:14:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)) 08:14:26 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000003040)=0x1) 08:14:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x640) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000140)=""/135}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x2, 0x96c4, 0x401, 0x90a, 0x0, 0xcdb0, 0xca0c}) shmget(0x1, 0x1000, 0x400, &(0x7f0000ffd000/0x1000)=nil) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000300)={r4, 0x2, r2, 0x7b, 0x80000}) 08:14:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:26 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000003040)=0x1) 08:14:26 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000003040)=0x1) 08:14:26 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:26 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x640) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) (async, rerun: 64) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) (rerun: 64) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000140)=""/135}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (rerun: 32) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x2, 0x96c4, 0x401, 0x90a, 0x0, 0xcdb0, 0xca0c}) (async) shmget(0x1, 0x1000, 0x400, &(0x7f0000ffd000/0x1000)=nil) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000300)={r4, 0x2, r2, 0x7b, 0x80000}) 08:14:26 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:26 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000003040)=0x1) 08:14:26 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:26 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000003040)=0x1) 08:14:26 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 08:14:26 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:26 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:26 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x640) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000140)=""/135}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x2, 0x96c4, 0x401, 0x90a, 0x0, 0xcdb0, 0xca0c}) shmget(0x1, 0x1000, 0x400, &(0x7f0000ffd000/0x1000)=nil) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000300)={r4, 0x2, r2, 0x7b, 0x80000}) 08:14:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 08:14:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x640) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000140)=""/135}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x2, 0x96c4, 0x401, 0x90a, 0x0, 0xcdb0, 0xca0c}) shmget(0x1, 0x1000, 0x400, &(0x7f0000ffd000/0x1000)=nil) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r4) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000300)={r4, 0x2, r2, 0x7b, 0x80000}) 08:14:26 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 08:14:26 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000003040)=0x1) 08:14:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 08:14:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 08:14:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 08:14:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000280)=0x7099, &(0x7f00000002c0)=0x2) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000200)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/comedi', 0x24800, 0x1) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={0x0, 0x9}) 08:14:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 08:14:26 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="a8aab7b686ff04bd60ce7af6fe80aeb12a60ee98d505b6775d3a0dc791e72cbb0e7697b7e71d9e8f108e9fb7b35b29b75a26dba63b24054b8b379ed7730f75289a9e70e8e3eaa41326b58b494cc6c58a95489cf6cac5aad015a5620f20fa50cec29ec9053c9e43a5d911d4fafe3e7bdb04911835441304f0181e8206a4a1c5cb9acccfd96760b56071bbc70404e66c127021d5674b76dda22eacad8805fc852d841dd848be3b08de882fd45b9533053943beb603b1682655d962d2d1651baee2441e0ecc2ae159071c448ea72f26d5b4978e419eca08aa94319f28f48f7e6dae6c6148d372d9e117a21a4222ca3a5bf5b33333e3189129a81f7f4772054c5fa61520252c2035aaaa807bf21b88ebd68e7ae603365f6380685ebbc164b44051e041b4002ee51c99f2b98e5c51bab323e05db45fe79b675ec9c91dc456e9ad103ad57f49a80ac87f9fe2b3384ecd232494dbd11bba3cf537c70931082d8880e8d40520bc38b2fa1fa71db05c22f8ccd74b83e5a66d2bb249226e5789df00491beeb3aad91b83961e30cb444e3861a2a552cab74ebd1b89cca45f7257a96db5873abbca8d3c2579e8b27645aed36304957a9bf78d32a0f917e5ee05e210fb350e57f8e122bfd4bd744927f570a6a14b60d3ea657074400fd0a80842ff67d74c3ab5bc9cb0e2a51cc5d140c8b81a9f3833426a35fde36b032d337d85585e83920c4abec0dd85ee4987bfdca5f3583038221a45413c3adaf00a5fa06a4af3383af5335bb41d64d059343b52f71c1b9d24bf5624e70e8de3a3edc5807f97f496eb57afacb265f28be53feeb29fa80d24393819736cb3ad959dbc3b2dd3e8cfff56a7cd3e9388a1b941b29796842806ad36311334f4b8923e68727de12b78ee0a2487e6c11b9c8d8ac94159b00e0e3d3b290176158f50154088e2a9686a1bc248d7ca40f03a9f31a8c09cf259eabca470323f1c8258c05702cf49fd57d955cfceb4d3581965fccad1e39ef1f6c2ffe04e761013e9101667d2d9ae8c68a9fc15476716fb9fb93fd7d4f66f4164cf47044e445faad69204fb5983bef37ded50beae515969be1e0cc91e74e2b66351e1ed9188cc4f0974c48eee149f6121ae765974df1b6739540e661c34f827a42f127a1a0eee8cc19d53e86d7aed65db7aecac9a0ad22cb86cbb8067c4ba90e0c3a1612ef1e00ae3df967e83b48d5e6dfa11ad5983df4d399999d4e23f473db61fee71bbd6e521b342cae7053aa9115357e9dc47fe1772c735229eaed85b2c0c3e7c33a12e04e59a200237f4e8930a777564f8ea4b64d6f65f375bdebf28c45da0b8e8e56c6ba6120cf5db26df87a623621744245806453d3f907351217667aeb4fc4d9ba6ff563dc0d3277c1b060d487fa2002a6964c4bdc22c99fef10979d0b7e25db7edb9e1b2ee765b60a09aceb4bb79b4b9d57e1b"}) syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000003040)=0x1) 08:14:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000003040)) 08:14:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 08:14:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000280)=0x7099, &(0x7f00000002c0)=0x2) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000200)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/comedi', 0x24800, 0x1) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={0x0, 0x9}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000280)=0x7099, &(0x7f00000002c0)=0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000200)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/comedi', 0x24800, 0x1) (async) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={0x0, 0x9}) (async) 08:14:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 08:14:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000280)=0x7099, &(0x7f00000002c0)=0x2) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000200)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/comedi', 0x24800, 0x1) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={0x0, 0x9}) 08:14:27 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="a8aab7b686ff04bd60ce7af6fe80aeb12a60ee98d505b6775d3a0dc791e72cbb0e7697b7e71d9e8f108e9fb7b35b29b75a26dba63b24054b8b379ed7730f75289a9e70e8e3eaa41326b58b494cc6c58a95489cf6cac5aad015a5620f20fa50cec29ec9053c9e43a5d911d4fafe3e7bdb04911835441304f0181e8206a4a1c5cb9acccfd96760b56071bbc70404e66c127021d5674b76dda22eacad8805fc852d841dd848be3b08de882fd45b9533053943beb603b1682655d962d2d1651baee2441e0ecc2ae159071c448ea72f26d5b4978e419eca08aa94319f28f48f7e6dae6c6148d372d9e117a21a4222ca3a5bf5b33333e3189129a81f7f4772054c5fa61520252c2035aaaa807bf21b88ebd68e7ae603365f6380685ebbc164b44051e041b4002ee51c99f2b98e5c51bab323e05db45fe79b675ec9c91dc456e9ad103ad57f49a80ac87f9fe2b3384ecd232494dbd11bba3cf537c70931082d8880e8d40520bc38b2fa1fa71db05c22f8ccd74b83e5a66d2bb249226e5789df00491beeb3aad91b83961e30cb444e3861a2a552cab74ebd1b89cca45f7257a96db5873abbca8d3c2579e8b27645aed36304957a9bf78d32a0f917e5ee05e210fb350e57f8e122bfd4bd744927f570a6a14b60d3ea657074400fd0a80842ff67d74c3ab5bc9cb0e2a51cc5d140c8b81a9f3833426a35fde36b032d337d85585e83920c4abec0dd85ee4987bfdca5f3583038221a45413c3adaf00a5fa06a4af3383af5335bb41d64d059343b52f71c1b9d24bf5624e70e8de3a3edc5807f97f496eb57afacb265f28be53feeb29fa80d24393819736cb3ad959dbc3b2dd3e8cfff56a7cd3e9388a1b941b29796842806ad36311334f4b8923e68727de12b78ee0a2487e6c11b9c8d8ac94159b00e0e3d3b290176158f50154088e2a9686a1bc248d7ca40f03a9f31a8c09cf259eabca470323f1c8258c05702cf49fd57d955cfceb4d3581965fccad1e39ef1f6c2ffe04e761013e9101667d2d9ae8c68a9fc15476716fb9fb93fd7d4f66f4164cf47044e445faad69204fb5983bef37ded50beae515969be1e0cc91e74e2b66351e1ed9188cc4f0974c48eee149f6121ae765974df1b6739540e661c34f827a42f127a1a0eee8cc19d53e86d7aed65db7aecac9a0ad22cb86cbb8067c4ba90e0c3a1612ef1e00ae3df967e83b48d5e6dfa11ad5983df4d399999d4e23f473db61fee71bbd6e521b342cae7053aa9115357e9dc47fe1772c735229eaed85b2c0c3e7c33a12e04e59a200237f4e8930a777564f8ea4b64d6f65f375bdebf28c45da0b8e8e56c6ba6120cf5db26df87a623621744245806453d3f907351217667aeb4fc4d9ba6ff563dc0d3277c1b060d487fa2002a6964c4bdc22c99fef10979d0b7e25db7edb9e1b2ee765b60a09aceb4bb79b4b9d57e1b"}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000003040)=0x1) 08:14:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:27 executing program 3: ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 08:14:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x0, 0x3}) 08:14:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000280)=0x7099, &(0x7f00000002c0)=0x2) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000200)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/comedi', 0x24800, 0x1) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={0x0, 0x9}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000280)=0x7099, &(0x7f00000002c0)=0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000200)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/comedi', 0x24800, 0x1) (async) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={0x0, 0x9}) (async) 08:14:27 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000280)=0x7099, &(0x7f00000002c0)=0x2) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000200)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/comedi', 0x24800, 0x1) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={0x0, 0x9}) 08:14:27 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000003040)=0x1) 08:14:27 executing program 3: ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 08:14:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={0x0, 0x0, 0x12fe4}) 08:14:27 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000280)=0x7099, &(0x7f00000002c0)=0x2) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000200)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/comedi', 0x24800, 0x1) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={0x0, 0x9}) 08:14:27 executing program 3: ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 08:14:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000003040)=0x1) 08:14:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000180)={0x1, 0xbd, 0x7ff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x2, 0x39, 0xe2, 0x7a, 0xfffffffffffffff9, 0x7, 0x800, 0x400, 0x0, 0xffffffffffffffff], 0x4, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r4) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000280)={{0x3000, 0x10000, 0x0, 0x2, 0x7, 0x3, 0x40, 0x96, 0x6, 0x2, 0x8, 0x3f}, {0x10000, 0x20e000, 0xa, 0x6, 0x5, 0x3f, 0x1f, 0x55, 0x9, 0x2, 0xb6, 0x1}, {0x1, 0x3000, 0x0, 0x97, 0x0, 0x1, 0x30, 0xa5, 0x1, 0x7, 0xba, 0x5}, {0x1, 0xf000, 0x4, 0x1f, 0x7, 0x80, 0x5, 0xff, 0x9, 0x4, 0x8, 0x7}, {0x100000, 0x10c004, 0xd, 0xa4, 0x1, 0x5, 0x18, 0x4, 0x5b, 0x81, 0x6, 0x40}, {0xf000, 0x1, 0x3, 0x0, 0x0, 0x48, 0xe1, 0x1f, 0xe9, 0x20, 0xad, 0x20}, {0x0, 0x6000, 0xc, 0xea, 0x1a, 0x81, 0xf9, 0x7, 0x3f, 0x5, 0x6, 0x6}, {0x117000, 0x5000, 0x0, 0x1f, 0x2, 0x3f, 0x8, 0x8, 0x9, 0x4, 0x7}, {0xf000, 0x8001}, {0x0, 0x101}, 0x1, 0x0, 0x10000, 0x11, 0xf, 0x4800, 0x1000, [0x3, 0x4, 0xb7ef, 0x7fff]}) 08:14:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={0x0, 0x0}) 08:14:27 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000280)=0x7099, &(0x7f00000002c0)=0x2) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000200)) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/comedi', 0x24800, 0x1) 08:14:27 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 08:14:27 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000003040)=0x1) 08:14:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000180)={0x1, 0xbd, 0x7ff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x2, 0x39, 0xe2, 0x7a, 0xfffffffffffffff9, 0x7, 0x800, 0x400, 0x0, 0xffffffffffffffff], 0x4, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r4) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000280)={{0x3000, 0x10000, 0x0, 0x2, 0x7, 0x3, 0x40, 0x96, 0x6, 0x2, 0x8, 0x3f}, {0x10000, 0x20e000, 0xa, 0x6, 0x5, 0x3f, 0x1f, 0x55, 0x9, 0x2, 0xb6, 0x1}, {0x1, 0x3000, 0x0, 0x97, 0x0, 0x1, 0x30, 0xa5, 0x1, 0x7, 0xba, 0x5}, {0x1, 0xf000, 0x4, 0x1f, 0x7, 0x80, 0x5, 0xff, 0x9, 0x4, 0x8, 0x7}, {0x100000, 0x10c004, 0xd, 0xa4, 0x1, 0x5, 0x18, 0x4, 0x5b, 0x81, 0x6, 0x40}, {0xf000, 0x1, 0x3, 0x0, 0x0, 0x48, 0xe1, 0x1f, 0xe9, 0x20, 0xad, 0x20}, {0x0, 0x6000, 0xc, 0xea, 0x1a, 0x81, 0xf9, 0x7, 0x3f, 0x5, 0x6, 0x6}, {0x117000, 0x5000, 0x0, 0x1f, 0x2, 0x3f, 0x8, 0x8, 0x9, 0x4, 0x7}, {0xf000, 0x8001}, {0x0, 0x101}, 0x1, 0x0, 0x10000, 0x11, 0xf, 0x4800, 0x1000, [0x3, 0x4, 0xb7ef, 0x7fff]}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000180)={0x1, 0xbd, 0x7ff}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x2, 0x39, 0xe2, 0x7a, 0xfffffffffffffff9, 0x7, 0x800, 0x400, 0x0, 0xffffffffffffffff], 0x4, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r4) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) (async) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000280)={{0x3000, 0x10000, 0x0, 0x2, 0x7, 0x3, 0x40, 0x96, 0x6, 0x2, 0x8, 0x3f}, {0x10000, 0x20e000, 0xa, 0x6, 0x5, 0x3f, 0x1f, 0x55, 0x9, 0x2, 0xb6, 0x1}, {0x1, 0x3000, 0x0, 0x97, 0x0, 0x1, 0x30, 0xa5, 0x1, 0x7, 0xba, 0x5}, {0x1, 0xf000, 0x4, 0x1f, 0x7, 0x80, 0x5, 0xff, 0x9, 0x4, 0x8, 0x7}, {0x100000, 0x10c004, 0xd, 0xa4, 0x1, 0x5, 0x18, 0x4, 0x5b, 0x81, 0x6, 0x40}, {0xf000, 0x1, 0x3, 0x0, 0x0, 0x48, 0xe1, 0x1f, 0xe9, 0x20, 0xad, 0x20}, {0x0, 0x6000, 0xc, 0xea, 0x1a, 0x81, 0xf9, 0x7, 0x3f, 0x5, 0x6, 0x6}, {0x117000, 0x5000, 0x0, 0x1f, 0x2, 0x3f, 0x8, 0x8, 0x9, 0x4, 0x7}, {0xf000, 0x8001}, {0x0, 0x101}, 0x1, 0x0, 0x10000, 0x11, 0xf, 0x4800, 0x1000, [0x3, 0x4, 0xb7ef, 0x7fff]}) (async) 08:14:27 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000003040)=0x1) 08:14:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 08:14:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000280)=0x7099, &(0x7f00000002c0)=0x2) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000200)) 08:14:27 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000003040)=0x1) 08:14:27 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 08:14:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 08:14:27 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 08:14:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x103101) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:27 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000003040)=0x1) 08:14:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 08:14:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000280)=0x7099, &(0x7f00000002c0)=0x2) 08:14:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async, rerun: 64) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 64) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000180)={0x1, 0xbd, 0x7ff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x2, 0x39, 0xe2, 0x7a, 0xfffffffffffffff9, 0x7, 0x800, 0x400, 0x0, 0xffffffffffffffff], 0x4, 0x4, 0x4}) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r4) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 32) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000280)={{0x3000, 0x10000, 0x0, 0x2, 0x7, 0x3, 0x40, 0x96, 0x6, 0x2, 0x8, 0x3f}, {0x10000, 0x20e000, 0xa, 0x6, 0x5, 0x3f, 0x1f, 0x55, 0x9, 0x2, 0xb6, 0x1}, {0x1, 0x3000, 0x0, 0x97, 0x0, 0x1, 0x30, 0xa5, 0x1, 0x7, 0xba, 0x5}, {0x1, 0xf000, 0x4, 0x1f, 0x7, 0x80, 0x5, 0xff, 0x9, 0x4, 0x8, 0x7}, {0x100000, 0x10c004, 0xd, 0xa4, 0x1, 0x5, 0x18, 0x4, 0x5b, 0x81, 0x6, 0x40}, {0xf000, 0x1, 0x3, 0x0, 0x0, 0x48, 0xe1, 0x1f, 0xe9, 0x20, 0xad, 0x20}, {0x0, 0x6000, 0xc, 0xea, 0x1a, 0x81, 0xf9, 0x7, 0x3f, 0x5, 0x6, 0x6}, {0x117000, 0x5000, 0x0, 0x1f, 0x2, 0x3f, 0x8, 0x8, 0x9, 0x4, 0x7}, {0xf000, 0x8001}, {0x0, 0x101}, 0x1, 0x0, 0x10000, 0x11, 0xf, 0x4800, 0x1000, [0x3, 0x4, 0xb7ef, 0x7fff]}) 08:14:27 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 08:14:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x103101) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000003040)=0x1) 08:14:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x0, 0x4}) 08:14:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000440), 0xa0080, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x200801, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r5, 0xcd5, 0x80000}) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000140)=0x16d, &(0x7f0000000280)=0x4) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000300)={0x0, 0x1, r7, 0x80000cd5}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="f5a3831e0a1300000000000000003e007d8f24007af3", @ANYRES16=0x0, @ANYBLOB="010000000000000000000e00000008000100000000000800010003000000"], 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}}, 0x4000040) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r6, 0xc01064c1, &(0x7f0000000180)={r8}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) 08:14:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x103101) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:27 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 08:14:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x0, 0x4}) 08:14:27 executing program 2: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:27 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 08:14:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000440), 0xa0080, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x200801, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r5, 0xcd5, 0x80000}) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000140)=0x16d, &(0x7f0000000280)=0x4) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000300)={0x0, 0x1, r7, 0x80000cd5}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="f5a3831e0a1300000000000000003e007d8f24007af3", @ANYRES16=0x0, @ANYBLOB="010000000000000000000e00000008000100000000000800010003000000"], 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}}, 0x4000040) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r6, 0xc01064c1, &(0x7f0000000180)={r8}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000440), 0xa0080, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x200801, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r5, 0xcd5, 0x80000}) (async) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000140)=0x16d, &(0x7f0000000280)=0x4) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000002c0)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000300)={0x0, 0x1, r7, 0x80000cd5}) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="f5a3831e0a1300000000000000003e007d8f24007af3", @ANYRES16=0x0, @ANYBLOB="010000000000000000000e00000008000100000000000800010003000000"], 0x24}}, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}}, 0x4000040) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x1, r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r6, 0xc01064c1, &(0x7f0000000180)={r8}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) (async) 08:14:27 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000003040)=0x1) 08:14:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x0, 0x4}) 08:14:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) 08:14:28 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r4, 0x69, 0x1, 0xfff, 0x8, 0x0, 0xffff8000, 0x8, 0x76bc, 0x81, 0x80000001, 0x69e}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0), 0x0, 0x800}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x4}) 08:14:28 executing program 2: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:28 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000003040)=0x1) 08:14:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 08:14:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000440), 0xa0080, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x200801, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r5, 0xcd5, 0x80000}) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000140)=0x16d, &(0x7f0000000280)=0x4) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000300)={0x0, 0x1, r7, 0x80000cd5}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="f5a3831e0a1300000000000000003e007d8f24007af3", @ANYRES16=0x0, @ANYBLOB="010000000000000000000e00000008000100000000000800010003000000"], 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}}, 0x4000040) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r6, 0xc01064c1, &(0x7f0000000180)={r8}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000440), 0xa0080, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x200801, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r5, 0xcd5, 0x80000}) (async) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000140)=0x16d, &(0x7f0000000280)=0x4) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000002c0)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000300)={0x0, 0x1, r7, 0x80000cd5}) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="f5a3831e0a1300000000000000003e007d8f24007af3", @ANYRES16=0x0, @ANYBLOB="010000000000000000000e00000008000100000000000800010003000000"], 0x24}}, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}}, 0x4000040) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x1, r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r6, 0xc01064c1, &(0x7f0000000180)={r8}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) (async) 08:14:28 executing program 2: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040), &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x0, 0x4}) 08:14:28 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000003140)={0x0, 0x1, 0x12, 0x19, 0x2003a, &(0x7f0000002780)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000009c0)={0x1, 0x0, 0x11, 0xa, 0x45, &(0x7f00000005c0)}) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0x8, 0x98, &(0x7f0000000140)="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"}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000003040)=0x1) 08:14:28 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000003040)=0x1) 08:14:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 08:14:28 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x103101) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040), &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x0, 0x4}) 08:14:28 executing program 1: ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 08:14:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}], 0x10001, 0x0, '\x00', 0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 08:14:28 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x103101) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2004, 0x4, 0x8}) 08:14:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040), &(0x7f0000000140)=[{}, {}, {}, {}], 0x8, 0x0, '\x00', 0x0, 0x4}) 08:14:28 executing program 1: ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 08:14:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}], 0x10001, 0x0, '\x00', 0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 08:14:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x8, 0x0, '\x00', 0x1}) 08:14:28 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x103101) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:28 executing program 1: ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 08:14:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}], 0x10001, 0x0, '\x00', 0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}], 0x10001, 0x0, '\x00', 0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) 08:14:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 08:14:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:28 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 08:14:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x8, 0x0, '\x00', 0x1}) 08:14:28 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:28 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000003040)) 08:14:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x8, 0x0, '\x00', 0x1}) 08:14:28 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 08:14:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x8, 0x0, '\x00', 0x1}) 08:14:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x9}) 08:14:28 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x7, 0x3}) 08:14:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}, {}], 0x8, 0x0, '\x00', 0x1, 0x3}) 08:14:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x8, 0x0, '\x00', 0x1}) 08:14:28 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 08:14:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 08:14:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x9}) 08:14:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 08:14:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x9}) 08:14:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x8, 0x0, '\x00', 0x1}) 08:14:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}, {}], 0x8, 0x0, '\x00', 0x1, 0x2}) 08:14:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 08:14:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x9}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x9}) (async) 08:14:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 08:14:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 08:14:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=[{}, {}, {}], 0x12fe4, 0x0, '\x00', 0x0, 0x3}) 08:14:29 executing program 5: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x8, 0x0, '\x00', 0x1}) 08:14:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}], 0x8, 0x0, '\x00', 0x1, 0x1}) 08:14:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x9}) 08:14:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={0x0, 0x0, 0x12fe4}) 08:14:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 08:14:29 executing program 5: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x8, 0x0, '\x00', 0x1}) 08:14:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140), 0x8, 0x0, '\x00', 0x1}) 08:14:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x9}) 08:14:29 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 08:14:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={0x0, 0x0}) 08:14:29 executing program 5: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x8, 0x0, '\x00', 0x1}) 08:14:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140), 0x8, 0x0, '\x00', 0x1}) 08:14:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 08:14:29 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 08:14:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) 08:14:29 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x8, 0x0, '\x00', 0x1}) 08:14:29 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 08:14:29 executing program 2: ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0xe6], 0x2, 0x800, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f00000001c0)={r2}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x6, 0x1}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0xcd5, 0x80000}) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r8, 0xcd5, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r9, 0x0, r4, 0xed5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x4004, 0x5}) 08:14:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000040)) 08:14:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140), 0x8, 0x0, '\x00', 0x1}) 08:14:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) 08:14:29 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x8, 0x0, '\x00', 0x1}) 08:14:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000040)) (rerun: 32) 08:14:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}], 0x0, 0x0, '\x00', 0x1, 0x1}) 08:14:29 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x8, 0x0, '\x00', 0x1}) 08:14:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) 08:14:29 executing program 3: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) 08:14:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) 08:14:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}], 0x0, 0x0, '\x00', 0x1, 0x1}) 08:14:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x8, 0x0, '\x00', 0x1}) 08:14:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000040)) 08:14:29 executing program 3: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) 08:14:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) 08:14:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[{}], 0x0, 0x0, '\x00', 0x1, 0x1}) 08:14:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x600100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x9198d481fe9cc0f, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3fffffffffffc, 0x101001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={0x0, 0x33}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000cc0)=r7) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x0, r6, 0x100cd5}) ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f00000000c0)={0x0, 0x2}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x5, 0x6c2c}) 08:14:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x8, 0x0, '\x00', 0x1}) 08:14:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={0x0, 0x47, 0x1, 0x403, 0x8, 0x3, 0x0, 0xff, 0x2, 0x800, 0x9, 0x2}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f00000000c0)={r3, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:30 executing program 3: ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) 08:14:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) 08:14:30 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:30 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) 08:14:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:14:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x8, 0x0, '\x00', 0x1}) 08:14:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={0x0, 0x47, 0x1, 0x403, 0x8, 0x3, 0x0, 0xff, 0x2, 0x800, 0x9, 0x2}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f00000000c0)={r3, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={0x0, 0x47, 0x1, 0x403, 0x8, 0x3, 0x0, 0xff, 0x2, 0x800, 0x9, 0x2}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f00000000c0)={r3, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:30 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) 08:14:30 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x2) 08:14:30 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x8, 0x0, '\x00', 0x1}) 08:14:30 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) 08:14:30 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x2) 08:14:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)=0x3) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x6000a0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={0x0, 0x1, r3, 0x71fb9e8a}) 08:14:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x9, 0xffff043e, 0x1ff, 0x318000, 0x9, 0x0], 0x7, 0x80800}) 08:14:30 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) 08:14:30 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x8, 0x0, '\x00', 0x1}) 08:14:30 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x8, 0x0, '\x00', 0x1}) 08:14:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2400c040}, 0x4000884) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x4, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={0x0, 0x80}) 08:14:30 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20040000) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0xb, 0x0, 0x0) 08:14:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) 08:14:30 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x8, 0x0, '\x00', 0x1}) 08:14:30 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000000)=0x8001) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x204000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f00000000c0)={0xfffffffffffffff7}) 08:14:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000140)={0x30, 0x3, 0x0, {0x4, 0xf, 0x0, '/dev/dri/card#\x00'}}, 0x30) r2 = syz_open_dev$audion(&(0x7f0000000180), 0xffffffffffffffff, 0x4c00) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f00000002c0)={0x0, 0x4, &(0x7f00000001c0)=[0xb7, 0x9, 0x5, 0x8], &(0x7f0000000200)=[0x5a], &(0x7f0000000240)=[0x20, 0x200, 0xe0c, 0x1], &(0x7f0000000280)=[0x9, 0x10001]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 08:14:30 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6b1f) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x482000, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0xc003, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f00000000c0)={0x4, 0xfffffffd}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x9, 0x40}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x0, 0x4, 0x8}) 08:14:30 executing program 1: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000300)={"aa70c7bec69f6e9e6038b8c385f0f7e0", 0x0, 0x0, {0xfffffffffffffff8, 0x3000}, {0x0, 0x9}, 0xffffffff, [0x0, 0x1, 0x4, 0x4, 0x5, 0x1, 0x7fffffffffffffff, 0x0, 0x3, 0x800, 0x404, 0x8a, 0x800, 0xde4b, 0x100, 0x7fff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) syz_open_dev$dri(&(0x7f0000000140), 0x641, 0x307000) r5 = accept4$bt_l2cap(r2, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x0) getsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000280), 0x2) 08:14:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) 08:14:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) 08:14:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000140)={0x30, 0x3, 0x0, {0x4, 0xf, 0x0, '/dev/dri/card#\x00'}}, 0x30) r2 = syz_open_dev$audion(&(0x7f0000000180), 0xffffffffffffffff, 0x4c00) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f00000002c0)={0x0, 0x4, &(0x7f00000001c0)=[0xb7, 0x9, 0x5, 0x8], &(0x7f0000000200)=[0x5a], &(0x7f0000000240)=[0x20, 0x200, 0xe0c, 0x1], &(0x7f0000000280)=[0x9, 0x10001]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 08:14:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 08:14:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) 08:14:30 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6b1f) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x482000, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0xc003, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f00000000c0)={0x4, 0xfffffffd}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x9, 0x40}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x0, 0x4, 0x8}) 08:14:30 executing program 1: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000300)={"aa70c7bec69f6e9e6038b8c385f0f7e0", 0x0, 0x0, {0xfffffffffffffff8, 0x3000}, {0x0, 0x9}, 0xffffffff, [0x0, 0x1, 0x4, 0x4, 0x5, 0x1, 0x7fffffffffffffff, 0x0, 0x3, 0x800, 0x404, 0x8a, 0x800, 0xde4b, 0x100, 0x7fff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) syz_open_dev$dri(&(0x7f0000000140), 0x641, 0x307000) r5 = accept4$bt_l2cap(r2, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x0) getsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000280), 0x2) 08:14:30 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$fuse(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000044c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r6]) write$FUSE_OPEN(r0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x20) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r8, 0xcd5, 0x80000}) write$FUSE_BMAP(r8, &(0x7f0000000140)={0x18, 0xffffffffffffffda, r5, {0x2}}, 0x18) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x6000, &(0x7f0000002480)=ANY=[@ANYBLOB="9b8a24efca93d72266c3026919a66965", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r6, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',max_read=0x0000000000000008,allow_other,blksize=0x0000000000000e00,blksize=0x0000000000000800,allow_other,blksize=0x0000000000001000,allow_other,max_read=0x00000000000000b2,context=user_u,\x00']) setsockopt$bt_BT_DEFER_SETUP(r1, 0x29, 0x36, 0x0, 0x0) 08:14:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000140)={0x30, 0x3, 0x0, {0x4, 0xf, 0x0, '/dev/dri/card#\x00'}}, 0x30) r2 = syz_open_dev$audion(&(0x7f0000000180), 0xffffffffffffffff, 0x4c00) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f00000002c0)={0x0, 0x4, &(0x7f00000001c0)=[0xb7, 0x9, 0x5, 0x8], &(0x7f0000000200)=[0x5a], &(0x7f0000000240)=[0x20, 0x200, 0xe0c, 0x1], &(0x7f0000000280)=[0x9, 0x10001]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 08:14:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 08:14:30 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) 08:14:30 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6b1f) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x482000, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0xc003, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f00000000c0)={0x4, 0xfffffffd}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x9, 0x40}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x0, 0x4, 0x8}) [ 1314.609428][ T4470] fuse: Bad value for 'user_id' 08:14:30 executing program 1: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000300)={"aa70c7bec69f6e9e6038b8c385f0f7e0", 0x0, 0x0, {0xfffffffffffffff8, 0x3000}, {0x0, 0x9}, 0xffffffff, [0x0, 0x1, 0x4, 0x4, 0x5, 0x1, 0x7fffffffffffffff, 0x0, 0x3, 0x800, 0x404, 0x8a, 0x800, 0xde4b, 0x100, 0x7fff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) syz_open_dev$dri(&(0x7f0000000140), 0x641, 0x307000) r5 = accept4$bt_l2cap(r2, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x0) getsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000280), 0x2) 08:14:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000140)={0x30, 0x3, 0x0, {0x4, 0xf, 0x0, '/dev/dri/card#\x00'}}, 0x30) r2 = syz_open_dev$audion(&(0x7f0000000180), 0xffffffffffffffff, 0x4c00) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f00000002c0)={0x0, 0x4, &(0x7f00000001c0)=[0xb7, 0x9, 0x5, 0x8], &(0x7f0000000200)=[0x5a], &(0x7f0000000240)=[0x20, 0x200, 0xe0c, 0x1], &(0x7f0000000280)=[0x9, 0x10001]}) 08:14:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 08:14:30 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0xb, 0x0, 0x0) 08:14:30 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) 08:14:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={0x0, 0x0, 0x8}) 08:14:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000140)={0x30, 0x3, 0x0, {0x4, 0xf, 0x0, '/dev/dri/card#\x00'}}, 0x30) syz_open_dev$audion(&(0x7f0000000180), 0xffffffffffffffff, 0x4c00) 08:14:30 executing program 1: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000300)={"aa70c7bec69f6e9e6038b8c385f0f7e0", 0x0, 0x0, {0xfffffffffffffff8, 0x3000}, {0x0, 0x9}, 0xffffffff, [0x0, 0x1, 0x4, 0x4, 0x5, 0x1, 0x7fffffffffffffff, 0x0, 0x3, 0x800, 0x404, 0x8a, 0x800, 0xde4b, 0x100, 0x7fff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) syz_open_dev$dri(&(0x7f0000000140), 0x641, 0x307000) accept4$bt_l2cap(r2, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x0) 08:14:31 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x1, 0x9}) 08:14:31 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6b1f) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x482000, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0xc003, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f00000000c0)={0x4, 0xfffffffd}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000001c0)={0x9, 0x40}) 08:14:31 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0xb, 0x0, 0x0) 08:14:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000180), 0xffffffffffffffff, 0x4c00) 08:14:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={0x0, 0x0, 0x8}) 08:14:31 executing program 1: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000300)={"aa70c7bec69f6e9e6038b8c385f0f7e0", 0x0, 0x0, {0xfffffffffffffff8, 0x3000}, {0x0, 0x9}, 0xffffffff, [0x0, 0x1, 0x4, 0x4, 0x5, 0x1, 0x7fffffffffffffff, 0x0, 0x3, 0x800, 0x404, 0x8a, 0x800, 0xde4b, 0x100, 0x7fff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) syz_open_dev$dri(&(0x7f0000000140), 0x641, 0x307000) 08:14:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 08:14:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x9, 0x193100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000140)={0x0, 0xff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/scsi_mod', 0x600, 0xcc) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000240)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], 0x1, 0x0, '\x00', 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) 08:14:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) syz_open_dev$audion(&(0x7f0000000180), 0xffffffffffffffff, 0x4c00) 08:14:31 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6b1f) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x482000, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0xc003, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f00000000c0)={0x4, 0xfffffffd}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5}) 08:14:31 executing program 1: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000300)={"aa70c7bec69f6e9e6038b8c385f0f7e0", 0x0, 0x0, {0xfffffffffffffff8, 0x3000}, {0x0, 0x9}, 0xffffffff, [0x0, 0x1, 0x4, 0x4, 0x5, 0x1, 0x7fffffffffffffff, 0x0, 0x3, 0x800, 0x404, 0x8a, 0x800, 0xde4b, 0x100, 0x7fff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={0x0, 0x0, 0x8}) 08:14:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 08:14:31 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x1800) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x100, 0x5, 0x1, 0x3ff, 0x8, "0ca698768cd2d1eb"}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x29, 0x36, 0x0, 0x0) 08:14:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x8}) 08:14:31 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$audion(&(0x7f0000000180), 0xffffffffffffffff, 0x4c00) 08:14:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) 08:14:31 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6b1f) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x482000, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0xc003, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000000c0)={0x4, 0xfffffffd}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:31 executing program 1: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000300)={"aa70c7bec69f6e9e6038b8c385f0f7e0", 0x0, 0x0, {0xfffffffffffffff8, 0x3000}, {0x0, 0x9}, 0xffffffff, [0x0, 0x1, 0x4, 0x4, 0x5, 0x1, 0x7fffffffffffffff, 0x0, 0x3, 0x800, 0x404, 0x8a, 0x800, 0xde4b, 0x100, 0x7fff]}) 08:14:31 executing program 4: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000300)={"aa70c7bec69f6e9e6038b8c385f0f7e0", 0x0, 0x0, {0xfffffffffffffff8, 0x3000}, {0x0, 0x9}, 0xffffffff, [0x0, 0x1, 0x4, 0x4, 0x5, 0x1, 0x7fffffffffffffff, 0x0, 0x3, 0x800, 0x404, 0x8a, 0x800, 0xde4b, 0x100, 0x7fff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x8}) 08:14:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x0, 0x9}) 08:14:31 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6b1f) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x482000, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0xc003, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000000c0)={0x4, 0xfffffffd}) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:31 executing program 0: syz_open_dev$audion(&(0x7f0000000180), 0xffffffffffffffff, 0x4c00) 08:14:31 executing program 1: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0) 08:14:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x0, 0x9}) 08:14:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x8}) 08:14:31 executing program 0: syz_open_dev$audion(0x0, 0xffffffffffffffff, 0x4c00) 08:14:31 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x1800) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x100, 0x5, 0x1, 0x3ff, 0x8, "0ca698768cd2d1eb"}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x29, 0x36, 0x0, 0x0) 08:14:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, '\x00', 0x1}) 08:14:31 executing program 1: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) syz_open_dev$ttys(0xc, 0x2, 0x0) 08:14:31 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6b1f) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x482000, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0xc003, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000000c0)={0x4, 0xfffffffd}) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x0, 0x9}) 08:14:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:31 executing program 0: syz_open_dev$audion(0x0, 0xffffffffffffffff, 0x4c00) 08:14:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, '\x00', 0x1}) 08:14:31 executing program 1: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) 08:14:31 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6b1f) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x482000, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0xc003, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000000c0)={0x4, 0xfffffffd}) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080), &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x0, 0x9}) 08:14:31 executing program 0: syz_open_dev$audion(0x0, 0xffffffffffffffff, 0x4c00) 08:14:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, '\x00', 0x1}) 08:14:31 executing program 1: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) 08:14:31 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6b1f) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x482000, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0xc003, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080), &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x0, 0x9}) 08:14:31 executing program 0: syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x4c00) 08:14:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, '\x00', 0x1}) 08:14:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:32 executing program 1: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) 08:14:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x4000, 0x3, 0xae9, 0x2, 0x7fff, 0x1f, 0x4, 0x40, 0x52005be, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080), &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x13, 0x0, '\x00', 0x0, 0x9}) 08:14:32 executing program 0: syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x4c00) 08:14:32 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6b1f) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x482000, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) 08:14:32 executing program 1: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 08:14:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x0, 0x13, 0x0, '\x00', 0x1}) 08:14:32 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6b1f) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x482000, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0xc003, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:32 executing program 0: syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x4c00) 08:14:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) 08:14:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, '\x00', 0x1}) 08:14:32 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6b1f) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:32 executing program 1: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) 08:14:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) 08:14:32 executing program 0: syz_open_dev$audion(&(0x7f0000000180), 0xffffffffffffffff, 0x0) 08:14:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, '\x00', 0x1}) 08:14:32 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6b1f) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:32 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6b1f) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x482000, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0xc003, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:32 executing program 1: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) 08:14:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 08:14:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, '\x00', 0x1}) 08:14:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) 08:14:32 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6b1f) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:32 executing program 1: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) 08:14:32 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6b1f) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 08:14:32 executing program 0: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 08:14:32 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6b1f) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x482000, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:32 executing program 1: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) 08:14:32 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:32 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r1, 0x4b72, 0x0) ioctl$VT_RELDISP(r1, 0x5605) 08:14:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 08:14:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x20, 0x101000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)={0x6, "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"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000400)) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000380)=0xc1, &(0x7f00000003c0)=0x1) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x5, 0x4448], 0x2, 0x800}) 08:14:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0xc8301) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x10042, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r1}) 08:14:32 executing program 1: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) 08:14:32 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:32 executing program 4: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 08:14:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x20, 0x101000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)={0x6, "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"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000400)) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000380)=0xc1, &(0x7f00000003c0)=0x1) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x5, 0x4448], 0x2, 0x800}) 08:14:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) 08:14:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0xc8301) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x10042, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r1}) 08:14:32 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x7e}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:32 executing program 4: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 08:14:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) 08:14:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0xc8301) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x10042, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r1}) 08:14:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x20, 0x101000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)={0x6, "b15ae587f5a3398a2c000f67809baade6a66ec1b3f0c0fe61b78ba3c61d575df09acc8d1d060d75b1ac46a0a978857cfcfe6587986fad108ef0aa01f8bde8b0b0a22a5d387216a23a5c2d282d56a20895f7a583a649013dd999c73068864a2975ab0b38a054658ad89e33433f3b36b2cbd9177faaaf47c6d671a66983558d88ed65b31592d0d75dbbf837055dfbc9b50349d647bd442b83c26d5950c284616fbda79b6283ab856aef76603ba4b0168bcc6f77dfacb6be0e7899626b3a0d4c1503ede3f33ecadce15811a5953244a6337425d91c088151fadc7666caaa65e0dd7131bf374a06ae329cb12218efe223ffff2c37fd90aa198832d54a83a156d1a9d5e30a847eeb8490c2312af4ae87c2e23d0327249bd49e885c97414e58b19daaf2b80095055a733784b0b9fb2e7fcadcc5dd2371cf2fb88e29a929348dfca9aa340f13c0cb1a38635843ca2c54268c2da433cb6582a13b120845e51b47adaa23978733d4c7d3e4c93ac8f09a8aead57456bb5952e50b84296ff56a169d3a43431fd55849fd0620d5d10d6ff3e4b6bee34db9a3e2e007fdce83cdab7d4f7efd9fd2f137f116ee7ec2a64758b8414805ce342761854f981326a839e3c35d4af832fc480b33340e1ff0299b59f402b21909705afc0fc179b16873cea0ffbf9f1ec9495892421ab0643a9405c6e07b127a2297c964b66b4ac5be4a8f2801f8c015da4"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000400)) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000380)=0xc1, &(0x7f00000003c0)=0x1) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x5, 0x4448], 0x2, 0x800}) 08:14:33 executing program 4: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 08:14:33 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) 08:14:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0xc8301) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) 08:14:33 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 08:14:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x20, 0x101000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)={0x6, "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"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000400)) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000380)=0xc1, &(0x7f00000003c0)=0x1) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) 08:14:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:33 executing program 2: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) 08:14:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0xc8301) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) 08:14:33 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 08:14:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x20, 0x101000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)={0x6, "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"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000400)) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000380)=0xc1, &(0x7f00000003c0)=0x1) 08:14:33 executing program 5: ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:33 executing program 2: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:33 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 08:14:33 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) 08:14:33 executing program 3: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) 08:14:33 executing program 5: ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x20, 0x101000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)={0x6, "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"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000400)) 08:14:33 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) 08:14:33 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 08:14:33 executing program 3: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) 08:14:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x20, 0x101000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)={0x6, "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"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) 08:14:33 executing program 5: ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 08:14:33 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) 08:14:33 executing program 3: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) 08:14:33 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:33 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x20, 0x101000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)={0x6, "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"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) 08:14:33 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0xc8301) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) 08:14:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 08:14:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 08:14:33 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:33 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x20, 0x101000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)={0x6, "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"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 08:14:33 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 08:14:33 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0xc8301) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) 08:14:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 08:14:33 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:33 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 08:14:33 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x20, 0x101000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)={0x6, "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"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 08:14:33 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0xc8301) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) 08:14:33 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:33 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 08:14:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x20, 0x101000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)={0x6, "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"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0), 0x4) 08:14:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0xc8301) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) 08:14:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x20, 0x101000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)={0x6, "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"}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:34 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0) 08:14:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) 08:14:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0), 0x4) 08:14:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0) 08:14:34 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x20, 0x101000) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:34 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) 08:14:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0), 0x4) 08:14:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0) 08:14:34 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:34 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) 08:14:34 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000180)) 08:14:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0), 0x4) 08:14:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x0, 0x0}) 08:14:34 executing program 0: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:34 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:34 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) 08:14:34 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000180)) 08:14:34 executing program 0: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0), 0x4) 08:14:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x0, 0x0}) 08:14:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) 08:14:34 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000180)) 08:14:34 executing program 0: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:34 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0), 0x4) 08:14:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) 08:14:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x0, 0x0}) 08:14:34 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:34 executing program 1: setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000002c0), 0x4) 08:14:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) 08:14:34 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) 08:14:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) 08:14:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:34 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:34 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140), 0x0) 08:14:34 executing program 1: setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000002c0), 0x4) 08:14:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) 08:14:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) 08:14:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) 08:14:34 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:34 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140), 0x0) 08:14:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) 08:14:34 executing program 1: setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000002c0), 0x4) 08:14:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000180)) 08:14:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) 08:14:35 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140), 0x0) 08:14:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0), 0x4) 08:14:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000180)) 08:14:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x401}) 08:14:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) 08:14:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0), 0x4) 08:14:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x401}) 08:14:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000180)) 08:14:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}) 08:14:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0), 0x4) 08:14:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={0x0, 0x0}) 08:14:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:35 executing program 3: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, &(0x7f0000000180)) 08:14:35 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:35 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000002c0), 0x4) 08:14:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}) 08:14:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:35 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0), 0x4) 08:14:35 executing program 3: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, &(0x7f0000000180)) 08:14:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}) 08:14:35 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000002c0), 0x4) 08:14:35 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:35 executing program 2: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:35 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140), 0x0) 08:14:35 executing program 3: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, &(0x7f0000000180)) 08:14:35 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:35 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000002c0), 0x4) 08:14:35 executing program 2: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:35 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 08:14:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000180)) 08:14:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 08:14:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) 08:14:35 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 08:14:35 executing program 2: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000180)) 08:14:35 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 08:14:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000180)) 08:14:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) 08:14:35 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 08:14:35 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 08:14:35 executing program 4: ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:35 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, &(0x7f0000000180)) 08:14:35 executing program 5: setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) 08:14:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) 08:14:36 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:36 executing program 5: setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) 08:14:36 executing program 4: ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:36 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, &(0x7f0000000180)) 08:14:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 08:14:36 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x0, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:36 executing program 5: setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) 08:14:36 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, &(0x7f0000000180)) 08:14:36 executing program 4: ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x0, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:36 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x20, 0x101000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)={0x6, "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"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000400)) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000380)=0xc1, &(0x7f00000003c0)=0x1) 08:14:36 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 08:14:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) 08:14:36 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x0, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:36 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:36 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) 08:14:36 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:36 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 08:14:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) 08:14:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) 08:14:36 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) 08:14:36 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 08:14:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 08:14:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}) 08:14:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) 08:14:36 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:36 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0xa04c, 0x0, '\x00', 0x1, 0x6}) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0xb, 0x0, 0xffffffffffffffc0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x5, &(0x7f0000000080)=0x2) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'veth1_macvtap\x00', 0x6}) r1 = syz_open_dev$audion(&(0x7f0000000240), 0x2, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000280)={0x1ff}) 08:14:36 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) 08:14:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) 08:14:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 08:14:36 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) 08:14:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1c, 0x8800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0xc0b160a62b66bbc9, 0xffffffffffffffff}) r2 = syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x20800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r2}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 08:14:36 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) 08:14:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x7, 0x7f, 0x9, 0x6, 0x10001, 0x2, 0x1], 0x8, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r1}) 08:14:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x5}) 08:14:36 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xa2, 0x3, 0x7, 0x93d3, 0x2b45, 0x0, 0xffffffff, 0xd], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x8, 0x401}) 08:14:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x0, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:36 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) 08:14:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1c, 0x8800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0xc0b160a62b66bbc9, 0xffffffffffffffff}) r2 = syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x20800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r2}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 08:14:36 executing program 1: ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x50c0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r1}) 08:14:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)={0x0, "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"}) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x7ff, 0x517d, 0x4, 0x7, 0x14, "0e4b9e24705ad0ce"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x9}) 08:14:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) 08:14:36 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0xb, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x6, 0x0, 0x401, 0x9, 0x7, 0x6, 0xffff0001, 0x6, 0x8, 0x3ff], 0xa, 0x1800, 0x0, 0xffffffffffffffff}) write$FUSE_DIRENT(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="c800000031d3c272", @ANYRES64=0x0, @ANYBLOB="0200000000000000090000000000000001000000c900000029000000000000000500000000000000050000000000000004000000ffffffff83217b5c0000000005000000000000001f0000000000000000000000080000000200000000000000cb04000000000000010000000004000025000000000000000500000000000000690a00000000000002000000010000005d5e0000000000000300000000000000e96f0000000000000500000001ffffff2e2b282d25000000"], 0xc8) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) 08:14:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1c, 0x8800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0xc0b160a62b66bbc9, 0xffffffffffffffff}) r2 = syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x20800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r2}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 08:14:37 executing program 1: ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f00000001c0)={0x300, 0x5, &(0x7f0000000080)=[0x101, 0x2, 0x30, 0xe716, 0x3], &(0x7f00000000c0)=[0x51ef, 0x8], &(0x7f0000000140)=[0x522, 0x80000000], &(0x7f0000000180)=[0xfffffffc, 0x8, 0x0], 0x0, 0x8}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/extcon', 0x84040, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000640)={0x199, 0xa, &(0x7f0000000240)="64fe85913ce424de2ca49a3aa876ef0ae09c2bdd285c633d9d9770c20a83695a6f4b37ee7b1aa4f7c7eb92c955da59852f5f55dbda985eb9f57a50871ec0f31bbb59996ebaad90b5abee14ede158fd8d96d3bd97c7b6187736f380503f944d7332edd389d2861d5aacabf226b729aedfeab5916c1e56ae61ceb7c49e9ef5e6263fe3765541161c93774ede9a955723645e06017ca4c6aaaef87d84ef6306745fc2822ce775ee48a62a75981d65683363d088b1f118773b391964d53e0451123a56836518cdfaf33d3e6fae04107f337e1eda0c46c12f422b5ec33d951eaf04050afc5a3f59729c7aabaaa7847c4b0e46ff32b961117590b2b91d1a86ebfcf1f831ea8ce9eac3cb1fbbb7086e69ba88ea30b5c7c684d65ef6ee774b8bf7165246972a2ebe7f6ac381ba6b81d3c3a14ea6e99031c29f01472dd671923fd3d8d1bbfa139aa4f6f7dfe071af379166e7d67b685c51c16dc9d968659877965b38c9f8b0e704b4784c2466db3ec1eb8e609ff6262f1f088b70a02610b347034fe222415e4c854f77f75aecb66645e3c319e178ce6e7ae09e8f1c3686712fa56e3fb65b770909f0286d684f624a493174ae2fff938812a245c1e44b867b0c76d463125cf68b90c119ff567152e3032f6f0338d0dce3f62004dbc63743087280b29af1e963d2672bb644ff5e414885988adb31511c32c222a658ec2f1129493a5084aef5efbb2294efc6040f3847be89eaf18b35ae09edebd49bf90f4594afcae336376a9dd3656a4feef4116770c09995d8a7191bd508121468fbeb3db000ccc6fca8ea2fddebafa5796a3b0e0880fdae41e216e79b6523f2295b854bf3a978b60fd03b7aeeee8da591a8060c00d3200c4a42aa95dcc52c11dc89c1fd4b01cc6ef7bb0f425e1e9a2230676811a37d9cdea96851a0b4275fe8d5b04f6706ed64a4b6359dd168dd358d2f45c8249a5e10fe6bcd4d2f35a1d0a740e59e42e29b88c5c12162ed6612e428621b91f779a1c3a08342fd1288f7ae17c86125281781a124552978b452383736206f3d8622a307d8d5fe4ff0654f0bf261f3f7dbc637e99fff3bf4d4491a3810eeff16a4a946afa284e77f7ea0ac3a0c2b001e730e85c2dbfc2be1b81321bbe5c8d9387ef399bf4917b45644a91a279a911952d4a505df4999deb21576146285b1e3a696e5347c18d443a71ce83efd25362c2358288f6cfaa0391400748450e7be48163d536112323efa01f142b572630387977d578cca375f90d9d5c39a4497d55d432c7f1ec46dbc9da4a07420bd9b6a5d3ed9a4e35075af6562653b581e56c8b621ff9e97534b7b329efa22294aff6798ab619c31b949c8637e3433e91a1dcba7c0dd04ce29e965b848920d6f9e54c9892c443e7df1a6c2c4a14997d86ea671b5178b6efb44bb05cdf8e62f33d7c75357f5aeb5c812478e3175"}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}) 08:14:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r3, 0x40045436, 0x13) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f00000001c0)={0x4, 0x6, 0x404}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r4, 0x1, r2, 0xcd5}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000740)={0x1, 0x22, 0x1e, 0x10, 0x170, &(0x7f0000000340)}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r8, 0xcd5, 0x80000}) ioctl$KDFONTOP_SET(r6, 0x4b72, 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000180)={0x8d, 0x1, 0x808a}) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000780)={0x0, 0x0, 0x2}) 08:14:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) 08:14:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x20080) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0xff, 0xfffffffc, 0x5}) 08:14:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 08:14:37 executing program 1: ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f00000001c0)={0x300, 0x5, &(0x7f0000000080)=[0x101, 0x2, 0x30, 0xe716, 0x3], &(0x7f00000000c0)=[0x51ef, 0x8], &(0x7f0000000140)=[0x522, 0x80000000], &(0x7f0000000180)=[0xfffffffc, 0x8, 0x0], 0x0, 0x8}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/extcon', 0x84040, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000640)={0x199, 0xa, &(0x7f0000000240)="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"}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1c, 0x8800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0xc0b160a62b66bbc9, 0xffffffffffffffff}) r2 = syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x20800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 08:14:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) 08:14:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}) 08:14:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x20080) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0xff, 0xfffffffc, 0x5}) 08:14:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)) 08:14:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x401}) 08:14:37 executing program 1: ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f00000001c0)={0x300, 0x5, &(0x7f0000000080)=[0x101, 0x2, 0x30, 0xe716, 0x3], &(0x7f00000000c0)=[0x51ef, 0x8], &(0x7f0000000140)=[0x522, 0x80000000], &(0x7f0000000180)=[0xfffffffc, 0x8, 0x0], 0x0, 0x8}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/extcon', 0x84040, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000640)={0x199, 0xa, &(0x7f0000000240)="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"}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1c, 0x8800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0xc0b160a62b66bbc9, 0xffffffffffffffff}) r2 = syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x20800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 08:14:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1c, 0x8800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0xc0b160a62b66bbc9, 0xffffffffffffffff}) r2 = syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x20800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 08:14:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x20080) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0xff, 0xfffffffc, 0x5}) 08:14:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000002c0)={0x301, 0x2, &(0x7f00000001c0)=[0x3, 0x3], &(0x7f0000000200)=[0x200, 0x7, 0x9, 0x0, 0x49, 0x1, 0x10000], &(0x7f0000000240)=[0x7fff], &(0x7f0000000280)=[0x9, 0x1, 0x80], 0x0, 0x4}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000000c0)={r2, 0x12}) 08:14:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x401}) 08:14:37 executing program 1: ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f00000001c0)={0x300, 0x5, &(0x7f0000000080)=[0x101, 0x2, 0x30, 0xe716, 0x3], &(0x7f00000000c0)=[0x51ef, 0x8], &(0x7f0000000140)=[0x522, 0x80000000], &(0x7f0000000180)=[0xfffffffc, 0x8, 0x0], 0x0, 0x8}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/extcon', 0x84040, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000640)={0x199, 0xa, &(0x7f0000000240)="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"}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:37 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0xb, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x250002, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x10000) 08:14:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000002c0)={0x301, 0x2, &(0x7f00000001c0)=[0x3, 0x3], &(0x7f0000000200)=[0x200, 0x7, 0x9, 0x0, 0x49, 0x1, 0x10000], &(0x7f0000000240)=[0x7fff], &(0x7f0000000280)=[0x9, 0x1, 0x80], 0x0, 0x4}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000000c0)={r2, 0x12}) 08:14:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1c, 0x8800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0xc0b160a62b66bbc9, 0xffffffffffffffff}) r2 = syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x20800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 08:14:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x20080) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x4}) 08:14:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={0x0, 0x0}) 08:14:37 executing program 1: ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f00000001c0)={0x300, 0x5, &(0x7f0000000080)=[0x101, 0x2, 0x30, 0xe716, 0x3], &(0x7f00000000c0)=[0x51ef, 0x8], &(0x7f0000000140)=[0x522, 0x80000000], &(0x7f0000000180)=[0xfffffffc, 0x8, 0x0], 0x0, 0x8}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/extcon', 0x84040, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000640)={0x199, 0xa, &(0x7f0000000240)="64fe85913ce424de2ca49a3aa876ef0ae09c2bdd285c633d9d9770c20a83695a6f4b37ee7b1aa4f7c7eb92c955da59852f5f55dbda985eb9f57a50871ec0f31bbb59996ebaad90b5abee14ede158fd8d96d3bd97c7b6187736f380503f944d7332edd389d2861d5aacabf226b729aedfeab5916c1e56ae61ceb7c49e9ef5e6263fe3765541161c93774ede9a955723645e06017ca4c6aaaef87d84ef6306745fc2822ce775ee48a62a75981d65683363d088b1f118773b391964d53e0451123a56836518cdfaf33d3e6fae04107f337e1eda0c46c12f422b5ec33d951eaf04050afc5a3f59729c7aabaaa7847c4b0e46ff32b961117590b2b91d1a86ebfcf1f831ea8ce9eac3cb1fbbb7086e69ba88ea30b5c7c684d65ef6ee774b8bf7165246972a2ebe7f6ac381ba6b81d3c3a14ea6e99031c29f01472dd671923fd3d8d1bbfa139aa4f6f7dfe071af379166e7d67b685c51c16dc9d968659877965b38c9f8b0e704b4784c2466db3ec1eb8e609ff6262f1f088b70a02610b347034fe222415e4c854f77f75aecb66645e3c319e178ce6e7ae09e8f1c3686712fa56e3fb65b770909f0286d684f624a493174ae2fff938812a245c1e44b867b0c76d463125cf68b90c119ff567152e3032f6f0338d0dce3f62004dbc63743087280b29af1e963d2672bb644ff5e414885988adb31511c32c222a658ec2f1129493a5084aef5efbb2294efc6040f3847be89eaf18b35ae09edebd49bf90f4594afcae336376a9dd3656a4feef4116770c09995d8a7191bd508121468fbeb3db000ccc6fca8ea2fddebafa5796a3b0e0880fdae41e216e79b6523f2295b854bf3a978b60fd03b7aeeee8da591a8060c00d3200c4a42aa95dcc52c11dc89c1fd4b01cc6ef7bb0f425e1e9a2230676811a37d9cdea96851a0b4275fe8d5b04f6706ed64a4b6359dd168dd358d2f45c8249a5e10fe6bcd4d2f35a1d0a740e59e42e29b88c5c12162ed6612e428621b91f779a1c3a08342fd1288f7ae17c86125281781a124552978b452383736206f3d8622a307d8d5fe4ff0654f0bf261f3f7dbc637e99fff3bf4d4491a3810eeff16a4a946afa284e77f7ea0ac3a0c2b001e730e85c2dbfc2be1b81321bbe5c8d9387ef399bf4917b45644a91a279a911952d4a505df4999deb21576146285b1e3a696e5347c18d443a71ce83efd25362c2358288f6cfaa0391400748450e7be48163d536112323efa01f142b572630387977d578cca375f90d9d5c39a4497d55d432c7f1ec46dbc9da4a07420bd9b6a5d3ed9a4e35075af6562653b581e56c8b621ff9e97534b7b329efa22294aff6798ab619c31b949c8637e3433e91a1dcba7c0dd04ce29e965b848920d6f9e54c9892c443e7df1a6c2c4a14997d86ea671b5178b6efb44bb05cdf8e62f33d7c75357f5aeb5c812478e3175"}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x4}) 08:14:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1c, 0x8800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0xc0b160a62b66bbc9}) syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x20800) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 08:14:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000002c0)={0x301, 0x2, &(0x7f00000001c0)=[0x3, 0x3], &(0x7f0000000200)=[0x200, 0x7, 0x9, 0x0, 0x49, 0x1, 0x10000], &(0x7f0000000240)=[0x7fff], &(0x7f0000000280)=[0x9, 0x1, 0x80], 0x0, 0x4}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000000c0)={r2, 0x12}) 08:14:37 executing program 0: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000080)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x9}) 08:14:37 executing program 1: ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f00000001c0)={0x300, 0x5, &(0x7f0000000080)=[0x101, 0x2, 0x30, 0xe716, 0x3], &(0x7f00000000c0)=[0x51ef, 0x8], &(0x7f0000000140)=[0x522, 0x80000000], &(0x7f0000000180)=[0xfffffffc, 0x8, 0x0], 0x0, 0x8}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/extcon', 0x84040, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000640)={0x199, 0xa, &(0x7f0000000240)="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"}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:37 executing program 4: ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$audion(&(0x7f0000000080), 0xfffffffffffff48a, 0x2300) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f00000000c0)={{0x0, 0x0, 0x80}}) 08:14:37 executing program 5: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000000c0)={0x4}) 08:14:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1c, 0x8800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0xc0b160a62b66bbc9}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 08:14:37 executing program 1: ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f00000001c0)={0x300, 0x5, &(0x7f0000000080)=[0x101, 0x2, 0x30, 0xe716, 0x3], &(0x7f00000000c0)=[0x51ef, 0x8], &(0x7f0000000140)=[0x522, 0x80000000], &(0x7f0000000180)=[0xfffffffc, 0x8, 0x0], 0x0, 0x8}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/extcon', 0x84040, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000640)={0x199, 0xa, &(0x7f0000000240)="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"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:37 executing program 0: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000080)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x9}) 08:14:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000002c0)={0x301, 0x2, &(0x7f00000001c0)=[0x3, 0x3], &(0x7f0000000200)=[0x200, 0x7, 0x9, 0x0, 0x49, 0x1, 0x10000], &(0x7f0000000240)=[0x7fff], &(0x7f0000000280)=[0x9, 0x1, 0x80], 0x0, 0x4}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]}) 08:14:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x20200) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7f, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f00000001c0)={0x4, r1}) r2 = syz_open_dev$audion(&(0x7f00000000c0), 0x3, 0x60c01) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xfffffffc, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0]}) 08:14:37 executing program 5: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000000c0)={0x4}) 08:14:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1c, 0x8800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 08:14:37 executing program 1: ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f00000001c0)={0x300, 0x5, &(0x7f0000000080)=[0x101, 0x2, 0x30, 0xe716, 0x3], &(0x7f00000000c0)=[0x51ef, 0x8], &(0x7f0000000140)=[0x522, 0x80000000], &(0x7f0000000180)=[0xfffffffc, 0x8, 0x0], 0x0, 0x8}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/extcon', 0x84040, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000640)={0x199, 0xa, &(0x7f0000000240)="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"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:37 executing program 5: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000000c0)={0x4}) 08:14:37 executing program 0: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000080)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x9}) 08:14:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000002c0)={0x301, 0x2, &(0x7f00000001c0)=[0x3, 0x3], &(0x7f0000000200)=[0x200, 0x7, 0x9, 0x0, 0x49, 0x1, 0x10000], &(0x7f0000000240)=[0x7fff], &(0x7f0000000280)=[0x9, 0x1, 0x80], 0x0, 0x4}) 08:14:37 executing program 1: ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f00000001c0)={0x300, 0x5, &(0x7f0000000080)=[0x101, 0x2, 0x30, 0xe716, 0x3], &(0x7f00000000c0)=[0x51ef, 0x8], &(0x7f0000000140)=[0x522, 0x80000000], &(0x7f0000000180)=[0xfffffffc, 0x8, 0x0], 0x0, 0x8}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/extcon', 0x84040, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000640)={0x199, 0xa, &(0x7f0000000240)="64fe85913ce424de2ca49a3aa876ef0ae09c2bdd285c633d9d9770c20a83695a6f4b37ee7b1aa4f7c7eb92c955da59852f5f55dbda985eb9f57a50871ec0f31bbb59996ebaad90b5abee14ede158fd8d96d3bd97c7b6187736f380503f944d7332edd389d2861d5aacabf226b729aedfeab5916c1e56ae61ceb7c49e9ef5e6263fe3765541161c93774ede9a955723645e06017ca4c6aaaef87d84ef6306745fc2822ce775ee48a62a75981d65683363d088b1f118773b391964d53e0451123a56836518cdfaf33d3e6fae04107f337e1eda0c46c12f422b5ec33d951eaf04050afc5a3f59729c7aabaaa7847c4b0e46ff32b961117590b2b91d1a86ebfcf1f831ea8ce9eac3cb1fbbb7086e69ba88ea30b5c7c684d65ef6ee774b8bf7165246972a2ebe7f6ac381ba6b81d3c3a14ea6e99031c29f01472dd671923fd3d8d1bbfa139aa4f6f7dfe071af379166e7d67b685c51c16dc9d968659877965b38c9f8b0e704b4784c2466db3ec1eb8e609ff6262f1f088b70a02610b347034fe222415e4c854f77f75aecb66645e3c319e178ce6e7ae09e8f1c3686712fa56e3fb65b770909f0286d684f624a493174ae2fff938812a245c1e44b867b0c76d463125cf68b90c119ff567152e3032f6f0338d0dce3f62004dbc63743087280b29af1e963d2672bb644ff5e414885988adb31511c32c222a658ec2f1129493a5084aef5efbb2294efc6040f3847be89eaf18b35ae09edebd49bf90f4594afcae336376a9dd3656a4feef4116770c09995d8a7191bd508121468fbeb3db000ccc6fca8ea2fddebafa5796a3b0e0880fdae41e216e79b6523f2295b854bf3a978b60fd03b7aeeee8da591a8060c00d3200c4a42aa95dcc52c11dc89c1fd4b01cc6ef7bb0f425e1e9a2230676811a37d9cdea96851a0b4275fe8d5b04f6706ed64a4b6359dd168dd358d2f45c8249a5e10fe6bcd4d2f35a1d0a740e59e42e29b88c5c12162ed6612e428621b91f779a1c3a08342fd1288f7ae17c86125281781a124552978b452383736206f3d8622a307d8d5fe4ff0654f0bf261f3f7dbc637e99fff3bf4d4491a3810eeff16a4a946afa284e77f7ea0ac3a0c2b001e730e85c2dbfc2be1b81321bbe5c8d9387ef399bf4917b45644a91a279a911952d4a505df4999deb21576146285b1e3a696e5347c18d443a71ce83efd25362c2358288f6cfaa0391400748450e7be48163d536112323efa01f142b572630387977d578cca375f90d9d5c39a4497d55d432c7f1ec46dbc9da4a07420bd9b6a5d3ed9a4e35075af6562653b581e56c8b621ff9e97534b7b329efa22294aff6798ab619c31b949c8637e3433e91a1dcba7c0dd04ce29e965b848920d6f9e54c9892c443e7df1a6c2c4a14997d86ea671b5178b6efb44bb05cdf8e62f33d7c75357f5aeb5c812478e3175"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x20200) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7f, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f00000001c0)={0x4, r1}) r2 = syz_open_dev$audion(&(0x7f00000000c0), 0x3, 0x60c01) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xfffffffc, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0]}) 08:14:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:37 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x1c, 0x8800) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 08:14:37 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x4}) 08:14:37 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/fuse', 0xa4282, 0x10) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000140)={r5}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r6, 0x4b72, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000400)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000280)={"a5d2ac468302724ce996db239cbce282", r7, 0x0, {0x0, 0x3}, {0x4, 0x7}, 0x100000000, [0x9, 0x0, 0x2, 0x180000000, 0x9, 0x200, 0xbd, 0x101, 0x8001, 0x5, 0x5, 0x101, 0x1f, 0x1, 0x5, 0x7]}) 08:14:38 executing program 1: ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f00000001c0)={0x300, 0x5, &(0x7f0000000080)=[0x101, 0x2, 0x30, 0xe716, 0x3], &(0x7f00000000c0)=[0x51ef, 0x8], &(0x7f0000000140)=[0x522, 0x80000000], &(0x7f0000000180)=[0xfffffffc, 0x8, 0x0], 0x0, 0x8}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/extcon', 0x84040, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x20200) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7f, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f00000001c0)={0x4, r1}) r2 = syz_open_dev$audion(&(0x7f00000000c0), 0x3, 0x60c01) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xfffffffc, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0]}) 08:14:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:38 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x4}) 08:14:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 08:14:38 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x4}) 08:14:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:38 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/fuse', 0xa4282, 0x10) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000140)={r5}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r6, 0x4b72, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000400)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000280)={"a5d2ac468302724ce996db239cbce282", r7, 0x0, {0x0, 0x3}, {0x4, 0x7}, 0x100000000, [0x9, 0x0, 0x2, 0x180000000, 0x9, 0x200, 0xbd, 0x101, 0x8001, 0x5, 0x5, 0x101, 0x1f, 0x1, 0x5, 0x7]}) 08:14:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x20200) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7f, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f00000001c0)={0x4, r1}) r2 = syz_open_dev$audion(&(0x7f00000000c0), 0x3, 0x60c01) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xfffffffc, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) 08:14:38 executing program 1: ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f00000001c0)={0x300, 0x5, &(0x7f0000000080)=[0x101, 0x2, 0x30, 0xe716, 0x3], &(0x7f00000000c0)=[0x51ef, 0x8], &(0x7f0000000140)=[0x522, 0x80000000], &(0x7f0000000180)=[0xfffffffc, 0x8, 0x0], 0x0, 0x8}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:38 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 08:14:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x4}) 08:14:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:38 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 08:14:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x20200) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7f, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f00000001c0)={0x4, r1}) r2 = syz_open_dev$audion(&(0x7f00000000c0), 0x3, 0x60c01) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xfffffffc, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) 08:14:38 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/fuse', 0xa4282, 0x10) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000140)={r5}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r6, 0x4b72, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000400)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000280)={"a5d2ac468302724ce996db239cbce282", r7, 0x0, {0x0, 0x3}, {0x4, 0x7}, 0x100000000, [0x9, 0x0, 0x2, 0x180000000, 0x9, 0x200, 0xbd, 0x101, 0x8001, 0x5, 0x5, 0x101, 0x1f, 0x1, 0x5, 0x7]}) 08:14:38 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 08:14:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x4}) 08:14:38 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:38 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x4}) 08:14:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x20200) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7f, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f00000001c0)={0x4, r1}) r2 = syz_open_dev$audion(&(0x7f00000000c0), 0x3, 0x60c01) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xfffffffc, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 08:14:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 08:14:38 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:38 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/fuse', 0xa4282, 0x10) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000140)={r4}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000400)) 08:14:38 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:38 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000000c0)={0x4}) 08:14:38 executing program 3: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 08:14:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x20200) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7f, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f00000001c0)={0x4, r1}) r2 = syz_open_dev$audion(&(0x7f00000000c0), 0x3, 0x60c01) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xfffffffc, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:38 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x20200) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7f, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f00000001c0)={0x4, r1}) r2 = syz_open_dev$audion(&(0x7f00000000c0), 0x3, 0x60c01) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:38 executing program 3: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 08:14:38 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/fuse', 0xa4282, 0x10) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000140)={r4}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 08:14:38 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000000c0)={0x4}) 08:14:38 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:38 executing program 3: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 08:14:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x20200) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7f, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f00000001c0)={0x4, r1}) syz_open_dev$audion(&(0x7f00000000c0), 0x3, 0x60c01) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:38 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:38 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000000c0)={0x4}) 08:14:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:38 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/fuse', 0xa4282, 0x10) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000140)={r4}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 08:14:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x20200) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7f, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f00000001c0)={0x4, r1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) 08:14:38 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 08:14:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) 08:14:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 08:14:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x20200) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7f}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:39 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/fuse', 0xa4282, 0x10) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000140)={r4}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, 0x0) 08:14:39 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) 08:14:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 08:14:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x20200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:39 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/fuse', 0xa4282, 0x10) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000140)={r4}) syz_open_dev$ttys(0xc, 0x2, 0x0) 08:14:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:14:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)) 08:14:39 executing program 4: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:39 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/fuse', 0xa4282, 0x10) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000140)={r4}) 08:14:39 executing program 4: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)) 08:14:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:39 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:39 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/fuse', 0xa4282, 0x10) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) 08:14:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)) 08:14:39 executing program 4: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:39 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:39 executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/fuse', 0xa4282, 0x10) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000140)={r4}) 08:14:39 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x20200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:39 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/fuse', 0xa4282, 0x10) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x2) 08:14:39 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:39 executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/fuse', 0xa4282, 0x10) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000140)={r4}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 08:14:39 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:39 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/fuse', 0xa4282, 0x10) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)) 08:14:39 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x20200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 08:14:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:39 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x20200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:39 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 08:14:39 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/fuse', 0xa4282, 0x10) 08:14:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:39 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x20200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 08:14:40 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) 08:14:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:40 executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/fuse', 0xa4282, 0x10) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000140)={r4}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000400)) 08:14:40 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x800}) 08:14:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x20200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:40 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) 08:14:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:40 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x20200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x800}) 08:14:40 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) 08:14:40 executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) 08:14:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:40 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x800}) 08:14:40 executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) 08:14:40 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 08:14:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:40 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:40 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8], 0x4, 0x800}) 08:14:40 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:40 executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) 08:14:40 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:40 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8, 0x6], 0x5, 0x800}) 08:14:40 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:40 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8, 0x8], 0x4, 0x800}) 08:14:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:40 executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) 08:14:40 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7, 0x8], 0x3, 0x800}) 08:14:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 08:14:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:40 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) 08:14:40 executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 08:14:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x7], 0x2, 0x800}) 08:14:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401, 0x2}) 08:14:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 08:14:40 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) 08:14:40 executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f], 0x1, 0x800}) 08:14:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 08:14:41 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 08:14:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) 08:14:41 executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f], 0x1, 0x800}) 08:14:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x800}) 08:14:41 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 08:14:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f], 0x1, 0x800}) 08:14:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={0x0}) 08:14:41 executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 08:14:41 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xbd4f, 0x0], 0x2, 0x800}) 08:14:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) 08:14:41 executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:41 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:41 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x401, 0x2}) 08:14:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1, 0x800}) 08:14:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x800}) 08:14:41 executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:41 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x401, 0x2}) 08:14:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x20200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1, 0x800}) 08:14:41 executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x800}) 08:14:41 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x401, 0x2}) 08:14:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1, 0x800}) 08:14:41 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x800}) 08:14:41 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x20200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x0, 0x2}) 08:14:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0], 0x2, 0x800}) 08:14:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x20200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:41 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:41 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:41 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x800}) 08:14:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x0, 0x2}) 08:14:41 executing program 3: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0], 0x2}) 08:14:41 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:41 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x800}) 08:14:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x0, 0x2}) 08:14:41 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0], 0x2}) 08:14:41 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:41 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x800}) 08:14:42 executing program 3: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401}) 08:14:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0], 0x2}) 08:14:42 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 08:14:42 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:42 executing program 3: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:42 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x800}) 08:14:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401}) 08:14:42 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x20200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:42 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x4}) 08:14:42 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:42 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x800}) 08:14:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2001, 0x4, 0xfffffc9f}) 08:14:42 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x20200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x401}) 08:14:42 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x88901, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x5a19c1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000140)={0x0, r3}) r4 = syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x101003) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000001c0)={0x7, 0x5, 0x1, 0xfffffff7, 0x101, 0x814, 0x3f}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x7ff, 0x2) 08:14:42 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 08:14:42 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x800}) 08:14:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000001c0)={0x7, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)) 08:14:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2001, 0x4, 0xfffffc9f}) 08:14:42 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x88901, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x5a19c1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000140)={0x0, r3}) r4 = syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x101003) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000001c0)={0x7, 0x5, 0x1, 0xfffffff7, 0x101, 0x814, 0x3f}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x7ff, 0x2) 08:14:42 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x20200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:42 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 08:14:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2001, 0x4, 0xfffffc9f}) 08:14:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000001c0)={0x7, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)) 08:14:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x800}) 08:14:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000001c0)={0x7, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)) 08:14:42 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x88901, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x5a19c1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000140)={0x0, r3}) r4 = syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x101003) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000001c0)={0x7, 0x5, 0x1, 0xfffffff7, 0x101, 0x814, 0x3f}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x7ff, 0x2) 08:14:42 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2001, 0x4, 0xfffffc9f}) 08:14:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x800}) 08:14:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000001c0)={0x7, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)) 08:14:42 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:42 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x88901, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x5a19c1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000140)={0x0, r3}) r4 = syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x101003) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000001c0)={0x7, 0x5, 0x1, 0xfffffff7, 0x101, 0x814, 0x3f}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)) 08:14:42 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000080)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x8001, 0x1000, 0xffffffff, 0x6, 0xe3, 0x4, 0x4, 0x3], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x6c, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000240)={r3}) 08:14:42 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2001, 0x4, 0xfffffc9f}) 08:14:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x800}) 08:14:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000001c0)={0x7, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 08:14:42 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:42 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x88901, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x5a19c1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000140)={0x0, r3}) r4 = syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x101003) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000001c0)={0x7, 0x5, 0x1, 0xfffffff7, 0x101, 0x814, 0x3f}) 08:14:42 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2001, 0x4, 0xfffffc9f}) 08:14:42 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000080)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x8001, 0x1000, 0xffffffff, 0x6, 0xe3, 0x4, 0x4, 0x3], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x6c, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000240)={r3}) 08:14:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2}) 08:14:42 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x800}) 08:14:42 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)}) 08:14:42 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x88901, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x5a19c1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000140)={0x0, r3}) syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x101003) 08:14:42 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000080)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x8001, 0x1000, 0xffffffff, 0x6, 0xe3, 0x4, 0x4, 0x3], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x6c, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000240)={r3}) 08:14:42 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2001, 0x4, 0xfffffc9f}) 08:14:42 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x800}) 08:14:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) 08:14:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2}) 08:14:43 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x88901, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x5a19c1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x7}) syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x101003) 08:14:43 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000080)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x8001, 0x1000, 0xffffffff, 0x6, 0xe3, 0x4, 0x4, 0x3], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x6c, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) socket$nl_generic(0x10, 0x3, 0x10) 08:14:43 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2001, 0x4, 0xfffffc9f}) 08:14:43 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x800}) 08:14:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) 08:14:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2}) 08:14:43 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000080)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x8001, 0x1000, 0xffffffff, 0x6, 0xe3, 0x4, 0x4, 0x3], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x6c, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:43 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x88901, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x5a19c1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x101003) 08:14:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 08:14:43 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2001, 0x4, 0xfffffc9f}) 08:14:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) 08:14:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2}) 08:14:43 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x88901, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x5a19c1, 0x0) syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x101003) 08:14:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={0x0}) 08:14:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2001, 0x4, 0xfffffc9f}) 08:14:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 08:14:43 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000080)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x8001, 0x1000, 0xffffffff, 0x6, 0xe3, 0x4, 0x4, 0x3], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x6c, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2}) 08:14:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 08:14:43 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x88901, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x101003) 08:14:43 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2001, 0x4, 0xfffffc9f}) 08:14:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 08:14:43 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000080)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x8001, 0x1000, 0xffffffff, 0x6, 0xe3, 0x4, 0x4, 0x3], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x6c, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2}) 08:14:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:43 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2001, 0x4, 0xfffffc9f}) 08:14:43 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x88901, 0x0) syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x101003) 08:14:43 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000080)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x8001, 0x1000, 0xffffffff, 0x6, 0xe3, 0x4, 0x4, 0x3], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x6c, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 08:14:43 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2}) 08:14:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2}) 08:14:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:43 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x101003) 08:14:43 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2001, 0x4, 0xfffffc9f}) 08:14:43 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000080)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x8001, 0x1000, 0xffffffff, 0x6, 0xe3, 0x4, 0x4, 0x3], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x6c, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 08:14:43 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2}) 08:14:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:43 executing program 0: syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x101003) 08:14:43 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2}) 08:14:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 08:14:43 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000080)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x8001, 0x1000, 0xffffffff, 0x6, 0xe3, 0x4, 0x4, 0x3], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x6c, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 08:14:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:43 executing program 0: syz_open_dev$audion(0x0, 0x1, 0x101003) 08:14:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 08:14:43 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2}) 08:14:43 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000080)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x8001, 0x1000, 0xffffffff, 0x6, 0xe3, 0x4, 0x4, 0x3], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x6c, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 08:14:43 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000080)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:43 executing program 0: syz_open_dev$audion(0x0, 0x1, 0x101003) 08:14:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 08:14:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:44 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2}) 08:14:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:44 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000080)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r0}) 08:14:44 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:44 executing program 0: syz_open_dev$audion(0x0, 0x1, 0x101003) 08:14:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x4, 0xfffffc9f}) 08:14:44 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:44 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000080)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r0}) 08:14:44 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2}) 08:14:44 executing program 0: syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x101003) 08:14:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:44 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x4, 0xfffffc9f}) 08:14:44 executing program 0: syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x101003) 08:14:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2}) 08:14:44 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000080)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r0}) 08:14:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:44 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:44 executing program 0: syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x101003) 08:14:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2}) 08:14:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x4, 0xfffffc9f}) 08:14:44 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:44 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:44 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2001, 0x0, 0xfffffc9f}) 08:14:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2}) 08:14:44 executing program 0: syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x0) 08:14:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:44 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:44 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:44 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2}) 08:14:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2001, 0x0, 0xfffffc9f}) 08:14:44 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:44 executing program 0: syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x0) 08:14:44 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:44 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2}) 08:14:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2001, 0x0, 0xfffffc9f}) 08:14:44 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:44 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2001, 0x4}) 08:14:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:44 executing program 0: syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x0) 08:14:44 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:44 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2}) 08:14:44 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2001, 0x4}) 08:14:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 08:14:44 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:44 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b, 0x137d], 0x2}) 08:14:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 08:14:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2001, 0x4}) 08:14:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:45 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:45 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 08:14:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0}) 08:14:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2001, 0x4}) 08:14:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 08:14:45 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000080)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x8001, 0x1000, 0xffffffff, 0x6, 0xe3, 0x4, 0x4, 0x3], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x6c, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 08:14:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:45 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 08:14:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0}) 08:14:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 08:14:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:45 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000080)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x8001, 0x1000, 0xffffffff, 0x6, 0xe3, 0x4, 0x4, 0x3], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x6c, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) socket$nl_generic(0x10, 0x3, 0x10) 08:14:45 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0}) 08:14:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 08:14:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 08:14:45 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000080)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x8001, 0x1000, 0xffffffff, 0x6, 0xe3, 0x4, 0x4, 0x3], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x6c, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) socket$nl_generic(0x10, 0x3, 0x10) 08:14:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 08:14:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1b], 0x1}) 08:14:45 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0}) 08:14:45 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r0}) 08:14:45 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000080)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x8001, 0x1000, 0xffffffff, 0x6, 0xe3, 0x4, 0x4, 0x3], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x6c, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000240)={r3}) 08:14:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 08:14:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r1, 0x5429, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x40, 0xfffffff7, 0x20003}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000140)=0x5, &(0x7f0000000180)=0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r2}) 08:14:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 08:14:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)}) 08:14:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r1, 0x5429, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x40, 0xfffffff7, 0x20003}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000140)=0x5, &(0x7f0000000180)=0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r2}) 08:14:45 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r0}) 08:14:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 08:14:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)}) 08:14:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 08:14:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r1, 0x5429, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x40, 0xfffffff7, 0x20003}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000140)=0x5, &(0x7f0000000180)=0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r2}) 08:14:45 executing program 3: ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x3) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000040)={0x4, @random="2cfc96bf0875"}) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/xpad', 0x90100, 0x4) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000300)={0x701, 0x1, &(0x7f0000000200)=[0x6], &(0x7f0000000240)=[0x0, 0x3, 0x7, 0x2, 0x7, 0x90, 0x7f, 0x0], &(0x7f0000000280)=[0x1], &(0x7f00000002c0)=[0x0, 0x6869ffc0, 0x7fff], 0x0, 0x1}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"4c431ac2ce734d0f4804aa4dccf0ae95", r2, 0x0, {0x7, 0x4}, {0x6, 0x9}, 0x6, [0xff, 0x3, 0x8000000000000001, 0x100, 0x2000000000000000, 0x4, 0xd6e, 0x8, 0x7fffffffffffffff, 0x7, 0x6, 0xfffffffffffffff7, 0x2, 0x31, 0x20, 0x5]}) 08:14:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)}) 08:14:46 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r0}) 08:14:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 08:14:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) 08:14:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r1, 0x5429, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x40, 0xfffffff7, 0x20003}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000140)=0x5, &(0x7f0000000180)=0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r2}) 08:14:46 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:46 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1000, 0x6], 0x2, 0x800}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x29, 0xb, 0x0, 0x0) 08:14:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x1f000000}) 08:14:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:46 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r1, 0x5429, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x40, 0xfffffff7, 0x20003}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000140)=0x5, &(0x7f0000000180)=0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000000c0)) 08:14:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) 08:14:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x0, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x7000000}) 08:14:46 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r1, 0x5429, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x40, 0xfffffff7, 0x20003}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000140)=0x5, &(0x7f0000000180)=0x1) 08:14:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) 08:14:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0xfffffffe}) 08:14:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x0, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r1, 0x5429, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x40, 0xfffffff7, 0x20003}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0xfdfdffff}) 08:14:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x0, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)={r1}) 08:14:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r1, 0x5429, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:46 executing program 4: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0xb, 0x0, 0x0) 08:14:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)) 08:14:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r1, 0x5429, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 08:14:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x78000000}) 08:14:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:46 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) 08:14:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r1, 0x5429, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 08:14:46 executing program 1: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:46 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) 08:14:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2007, 0xb, 0x8}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f00000000c0)=""/5}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r3, 0x80000}) 08:14:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r1, 0x5429, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 08:14:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:47 executing program 1: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:47 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) 08:14:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2007, 0xb, 0x8}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f00000000c0)=""/5}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r3, 0x80000}) 08:14:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:47 executing program 1: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:47 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)) 08:14:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:47 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)) 08:14:47 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2007, 0xb, 0x8}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f00000000c0)=""/5}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r3, 0x80000}) 08:14:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:47 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:47 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)) 08:14:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 08:14:47 executing program 2: ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2007, 0xb, 0x8}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f00000000c0)=""/5}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 08:14:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)) 08:14:47 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 08:14:47 executing program 2: ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x0, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:47 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) 08:14:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2007, 0xb, 0x8}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f00000000c0)=""/5}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 08:14:47 executing program 2: ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 08:14:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x0, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2007, 0xb, 0x8}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f00000000c0)=""/5}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 08:14:47 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) 08:14:47 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 08:14:47 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x0, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2007, 0xb, 0x8}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f00000000c0)=""/5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 08:14:47 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) 08:14:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 08:14:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, 0x0) 08:14:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:47 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2007, 0xb, 0x8}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 08:14:47 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 08:14:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, 0x0) 08:14:48 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:48 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 08:14:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, 0x0) 08:14:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:48 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:48 executing program 4: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) 08:14:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:48 executing program 4: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) 08:14:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) 08:14:48 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) 08:14:48 executing program 4: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) 08:14:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r1}) 08:14:48 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r1, 0x5429, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) 08:14:48 executing program 5: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 08:14:48 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 08:14:48 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000040)={0x198, 0x8}) 08:14:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x5000000}) 08:14:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x0, 0x0, 0x0}) 08:14:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 08:14:48 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 08:14:48 executing program 5: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, 0x0) 08:14:48 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) getuid() r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0xe03, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2) 08:14:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r2}) r4 = syz_open_dev$audion(&(0x7f00000002c0), 0x4, 0x410080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000300)={0x1f, "d7c7cd4eba6200729e59bca16429f7f996f854d511bf9d616dc08797625e2755"}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000400)) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000140)=[r6, r1, 0x0, r2, 0x0, r7, r1], &(0x7f0000000140), 0x100000000, 0x7, 0x6}) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r9, 0xcd7, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f00000003c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f0000000440)=0xd5b5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:48 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 08:14:48 executing program 5: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 08:14:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, 0x0) 08:14:48 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) getuid() r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0xe03, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2) 08:14:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 08:14:48 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r2}) r4 = syz_open_dev$audion(&(0x7f00000002c0), 0x4, 0x410080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000300)={0x1f, "d7c7cd4eba6200729e59bca16429f7f996f854d511bf9d616dc08797625e2755"}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000400)) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000140)=[r6, r1, 0x0, r2, 0x0, r7, r1], &(0x7f0000000140), 0x100000000, 0x7, 0x6}) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r9, 0xcd7, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f00000003c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f0000000440)=0xd5b5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 08:14:48 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) getuid() r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0xe03, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2) 08:14:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, 0x0) 08:14:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 08:14:48 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 08:14:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r2}) r4 = syz_open_dev$audion(&(0x7f00000002c0), 0x4, 0x410080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000300)={0x1f, "d7c7cd4eba6200729e59bca16429f7f996f854d511bf9d616dc08797625e2755"}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000400)) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000140)=[r6, r1, 0x0, r2, 0x0, r7, r1], &(0x7f0000000140), 0x100000000, 0x7, 0x6}) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r9, 0xcd7, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f00000003c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f0000000440)=0xd5b5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x0, 0x8}) 08:14:49 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) getuid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0xe03, 0x0) 08:14:49 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 08:14:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2005, 0x2, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 08:14:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r2}) r4 = syz_open_dev$audion(&(0x7f00000002c0), 0x4, 0x410080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000300)={0x1f, "d7c7cd4eba6200729e59bca16429f7f996f854d511bf9d616dc08797625e2755"}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000400)) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000140)=[r6, r1, 0x0, r2, 0x0, r7, r1], &(0x7f0000000140), 0x100000000, 0x7, 0x6}) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r9, 0xcd7, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f00000003c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f0000000440)=0xd5b5) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)) 08:14:49 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0xe03, 0x0) 08:14:49 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 08:14:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x78}) 08:14:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x5}) 08:14:49 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0xe03, 0x0) 08:14:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r2}) r4 = syz_open_dev$audion(&(0x7f00000002c0), 0x4, 0x410080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000300)={0x1f, "d7c7cd4eba6200729e59bca16429f7f996f854d511bf9d616dc08797625e2755"}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000400)) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000140)=[r5, r1, 0x0, r2, 0x0, r6, r1], &(0x7f0000000140), 0x100000000, 0x7, 0x6}) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r8, 0xcd7, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f00000003c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:49 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) 08:14:49 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x4, &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000000)={0x0, 0x9}) 08:14:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x2) 08:14:49 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0xe03, 0x0) 08:14:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) 08:14:49 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:14:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r2}) r4 = syz_open_dev$audion(&(0x7f00000002c0), 0x4, 0x410080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000300)={0x1f, "d7c7cd4eba6200729e59bca16429f7f996f854d511bf9d616dc08797625e2755"}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000400)) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000140)=[r5, r1, 0x0, r2, 0x0, r6, r1], &(0x7f0000000140), 0x100000000, 0x7, 0x6}) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r8, 0xcd7, 0x80000}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:49 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0xe03, 0x0) 08:14:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) 08:14:49 executing program 3: openat$sysfs(0xffffffffffffff9c, 0x0, 0xe03, 0x0) 08:14:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) 08:14:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r2}) r4 = syz_open_dev$audion(&(0x7f00000002c0), 0x4, 0x410080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000300)={0x1f, "d7c7cd4eba6200729e59bca16429f7f996f854d511bf9d616dc08797625e2755"}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000400)) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000140)=[r5, r1, 0x0, r2, 0x0, r6, r1], &(0x7f0000000140), 0x100000000, 0x7, 0x6}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:49 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0xe03, 0x0) 08:14:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) 08:14:49 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0xe03, 0x0) 08:14:49 executing program 3: openat$sysfs(0xffffffffffffff9c, 0x0, 0xe03, 0x0) 08:14:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)) 08:14:49 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0xe03, 0x0) 08:14:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r2}) r4 = syz_open_dev$audion(&(0x7f00000002c0), 0x4, 0x410080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000300)={0x1f, "d7c7cd4eba6200729e59bca16429f7f996f854d511bf9d616dc08797625e2755"}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000400)) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000140)=[r5, r1, 0x0, r2, 0x0, r6, r1], &(0x7f0000000140), 0x100000000, 0x7, 0x6}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:49 executing program 3: openat$sysfs(0xffffffffffffff9c, 0x0, 0xe03, 0x0) 08:14:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) 08:14:49 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0xe03, 0x0) 08:14:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)) 08:14:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x0, 0x0, 0x0}) 08:14:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x600}) 08:14:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r2}) r4 = syz_open_dev$audion(&(0x7f00000002c0), 0x4, 0x410080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000300)={0x1f, "d7c7cd4eba6200729e59bca16429f7f996f854d511bf9d616dc08797625e2755"}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000400)) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000140)=[r5, r1, 0x0, r2, 0x0, r6, r1], &(0x7f0000000140), 0x100000000, 0x7, 0x6}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:49 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x0, 0x0) 08:14:49 executing program 0: openat$sysfs(0xffffffffffffff9c, 0x0, 0xe03, 0x0) 08:14:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)) 08:14:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r1}) r3 = syz_open_dev$audion(&(0x7f00000002c0), 0x4, 0x410080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000300)={0x1f, "d7c7cd4eba6200729e59bca16429f7f996f854d511bf9d616dc08797625e2755"}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000400)) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000480)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r2}) r4 = syz_open_dev$audion(&(0x7f00000002c0), 0x4, 0x410080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000300)={0x1f, "d7c7cd4eba6200729e59bca16429f7f996f854d511bf9d616dc08797625e2755"}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000400)) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000140)=[r5, r1, 0x0, r2, 0x0, r6, r1], &(0x7f0000000140), 0x100000000, 0x7, 0x6}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:50 executing program 0: openat$sysfs(0xffffffffffffff9c, 0x0, 0xe03, 0x0) 08:14:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x500}) 08:14:50 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x0, 0x0) 08:14:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0xff000000}) 08:14:50 executing program 0: openat$sysfs(0xffffffffffffff9c, 0x0, 0xe03, 0x0) 08:14:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r1}) r3 = syz_open_dev$audion(&(0x7f00000002c0), 0x4, 0x410080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000300)={0x1f, "d7c7cd4eba6200729e59bca16429f7f996f854d511bf9d616dc08797625e2755"}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000400)) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000480)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:50 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x0, 0x0) 08:14:50 executing program 5: ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000040)={{0x0, 0x0, 0x80}}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) write$FUSE_IOCTL(r1, &(0x7f00000020c0)={0x20, 0x0, 0x0, {0x400, 0x0, 0x20, 0x400}}, 0x20) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0xcd5, 0x80000}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, 0x0) r6 = syz_open_dev$audion(&(0x7f0000002140), 0x0, 0x809c0) ioctl$KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000002180)=ANY=[@ANYRES64=r4]) 08:14:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x6}) 08:14:50 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x0, 0x0) 08:14:50 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0xb, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0), 0x4) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x2) 08:14:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r1}) r3 = syz_open_dev$audion(&(0x7f00000002c0), 0x4, 0x410080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000300)={0x1f, "d7c7cd4eba6200729e59bca16429f7f996f854d511bf9d616dc08797625e2755"}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000400)) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x4}) 08:14:50 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x0, 0x0) 08:14:50 executing program 4: setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0xfffffffffffffefb) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) 08:14:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x7, 0x8}) 08:14:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2002, 0x4, 0x8}) 08:14:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x7800}) 08:14:50 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x0, 0x0) 08:14:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r1}) r3 = syz_open_dev$audion(&(0x7f00000002c0), 0x4, 0x410080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000300)={0x1f, "d7c7cd4eba6200729e59bca16429f7f996f854d511bf9d616dc08797625e2755"}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000400)) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x7800}) 08:14:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x200e, 0x4, 0x8}) 08:14:50 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x2) 08:14:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r1}) r3 = syz_open_dev$audion(&(0x7f00000002c0), 0x4, 0x410080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000300)={0x1f, "d7c7cd4eba6200729e59bca16429f7f996f854d511bf9d616dc08797625e2755"}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000400)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r1}) r3 = syz_open_dev$audion(&(0x7f00000002c0), 0x4, 0x410080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000300)={0x1f, "d7c7cd4eba6200729e59bca16429f7f996f854d511bf9d616dc08797625e2755"}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000400)) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2005, 0x4, 0x8}) 08:14:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x8, 0x300}) 08:14:50 executing program 4: ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f00000020c0)={{0x0, 0x0, 0x80}}) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r5, 0xcd5, 0x80000}) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000180)=0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xcd5, 0x80000}) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000040)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) 08:14:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x400454ca, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x4, 0x7}) 08:14:50 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)={'rose0\x00'}) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0xb, 0x0, 0x0) 08:14:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r1}) r3 = syz_open_dev$audion(&(0x7f00000002c0), 0x4, 0x410080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000300)={0x1f, "d7c7cd4eba6200729e59bca16429f7f996f854d511bf9d616dc08797625e2755"}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000400)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:50 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x60180, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000), 0x2) 08:14:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5460, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2004, 0x5, 0x8}) 08:14:50 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000040)={0x2, 0xbd51, [{0xfff, 0x0, 0xa1b7000000000000}, {0x4, 0x0, 0x81}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) setsockopt$bt_BT_DEFER_SETUP(r2, 0x29, 0x36, 0x0, 0x0) 08:14:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r1}) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x4, 0x410080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000300)={0x1f, "d7c7cd4eba6200729e59bca16429f7f996f854d511bf9d616dc08797625e2755"}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc0189436, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r1}) syz_open_dev$audion(&(0x7f00000002c0), 0x4, 0x410080) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5460, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0x2, 0x2) read$FUSE(r2, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000002440)={0x38, 0x0, r5, [{0x6, 0xb3c, 0xc, 0x3, '/dev/audio#\x00'}]}, 0x38) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x6, 0x1f, 0x8, 0x4, 0x11, "82ed832403e94819"}) 08:14:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r1}) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x4, 0x410080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000300)={0x1f, "d7c7cd4eba6200729e59bca16429f7f996f854d511bf9d616dc08797625e2755"}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc0189436, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r1}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5460, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc0189436, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0x2, 0x2) read$FUSE(r2, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000002440)={0x38, 0x0, r5, [{0x6, 0xb3c, 0xc, 0x3, '/dev/audio#\x00'}]}, 0x38) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x6, 0x1f, 0x8, 0x4, 0x11, "82ed832403e94819"}) 08:14:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r1}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x80086301, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0x2, 0x2) read$FUSE(r2, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000002440)={0x38, 0x0, r5, [{0x6, 0xb3c, 0xc, 0x3, '/dev/audio#\x00'}]}, 0x38) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x6, 0x1f, 0x8, 0x4, 0x11, "82ed832403e94819"}) 08:14:51 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc0189436, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:51 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0xcd5, 0x80000}) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) 08:14:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc0189436, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0x2, 0x2) read$FUSE(r2, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000002440)={0x38, 0x0, r5, [{0x6, 0xb3c, 0xc, 0x3, '/dev/audio#\x00'}]}, 0x38) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x6, 0x1f, 0x8, 0x4, 0x11, "82ed832403e94819"}) 08:14:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc0189436, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0x2, 0x2) read$FUSE(r2, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000002440)={0x38, 0x0, r5, [{0x6, 0xb3c, 0xc, 0x3, '/dev/audio#\x00'}]}, 0x38) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) 08:14:51 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc0189436, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x5452, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:51 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0x2, 0x2) read$FUSE(r2, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000002440)={0x38, 0x0, r5, [{0x6, 0xb3c, 0xc, 0x3, '/dev/audio#\x00'}]}, 0x38) 08:14:51 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc0189436, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x5452, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:51 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc0189436, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0x2, 0x2) read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x2020) 08:14:51 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x5452, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 1: ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0)) 08:14:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc0189436, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0x2, 0x2) 08:14:51 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:51 executing program 1: ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0)) 08:14:51 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc0189436, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:52 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:52 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:52 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:52 executing program 1: ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0)) 08:14:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:52 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:52 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:52 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:52 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc0189436, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:52 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:52 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:52 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:52 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:52 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc0189436, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:52 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:52 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc0189436, 0x0) 08:14:52 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x5452, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:52 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:52 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:52 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:52 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:52 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x5452, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc0189436, 0x0) 08:14:52 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:52 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, 0x0) 08:14:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc0189436, 0x0) 08:14:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:52 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x5452, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:52 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r3, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:52 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, 0x0) 08:14:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc0189436, &(0x7f0000000100)={0x0, 0x4, 0x8}) 08:14:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, 0x0) 08:14:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, 0x0) 08:14:52 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r3, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, 0x0) 08:14:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc0189436, &(0x7f0000000100)={0x0, 0x0, 0x8}) 08:14:52 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0)) 08:14:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, 0x0) 08:14:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, 0x0) 08:14:52 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)={0x0, 0x4, 0x8}) 08:14:52 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0)) 08:14:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, 0x0) 08:14:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc0189436, &(0x7f0000000100)) 08:14:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, 0x0) 08:14:53 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0)) 08:14:53 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000100)={0x0, 0x4, 0x8}) 08:14:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)={0x0, 0x0, 0x8}) 08:14:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)) 08:14:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, &(0x7f0000000100)={0x0, 0x4, 0x8}) 08:14:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, 0x0) 08:14:53 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r0, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000100)={0x0, 0x4, 0x8}) 08:14:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) 08:14:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, 0x0) 08:14:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, &(0x7f0000000100)={0x0, 0x4, 0x8}) 08:14:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) 08:14:53 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r3, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000100)={0x0, 0x4, 0x8}) 08:14:53 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r0, 0xcd5, 0x80000}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, &(0x7f0000000100)={0x0, 0x4, 0x8}) 08:14:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) 08:14:53 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r0, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000100)={0x2004, 0x0, 0x8}) 08:14:53 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r3, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:53 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, &(0x7f0000000100)={0x2004, 0x0, 0x8}) 08:14:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000100)={0x2004}) 08:14:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:53 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0x2, 0x2) read$FUSE(r2, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000002440)={0x38, 0x0, r5, [{0x6, 0xb3c, 0xc, 0x3, '/dev/audio#\x00'}]}, 0x38) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) 08:14:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, &(0x7f0000000100)={0x2004}) 08:14:53 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:53 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0x2, 0x2) read$FUSE(r2, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000002440)={0x38, 0x0, r5, [{0x6, 0xb3c, 0xc, 0x3, '/dev/audio#\x00'}]}, 0x38) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) 08:14:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:53 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0x2, 0x2) read$FUSE(r2, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000002440)={0x38, 0x0, r5, [{0x6, 0xb3c, 0xc, 0x3, '/dev/audio#\x00'}]}, 0x38) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) 08:14:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:53 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x541b, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x10, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:53 executing program 1: ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0)) 08:14:53 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:53 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0x2, 0x2) read$FUSE(r2, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000002440)={0x38, 0x0, r5, [{0x6, 0xb3c, 0xc, 0x3, '/dev/audio#\x00'}]}, 0x38) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) 08:14:53 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x541b, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x10, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:53 executing program 1: ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0)) 08:14:53 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x541b, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:54 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0x2, 0x2) read$FUSE(r2, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000002440)={0x38, 0x0, r5, [{0x6, 0xb3c, 0xc, 0x3, '/dev/audio#\x00'}]}, 0x38) 08:14:54 executing program 1: ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0)) 08:14:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x10, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x541b, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:54 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0x2, 0x2) read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x2020) 08:14:54 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:54 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x541b, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:54 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0x2, 0x2) 08:14:54 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x541b, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:54 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 08:14:54 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:54 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x541b, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0)) 08:14:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:54 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x10, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:54 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x541b, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:54 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0)) 08:14:54 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x10, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x541b, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:54 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0)) 08:14:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:54 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x10, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) 08:14:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x541b, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064ce, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x10, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x541b, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, 0x0) 08:14:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:54 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"c0db0874bd2410f73def5a941d8d51f1", r3, 0x0, {0x1, 0x7}, {0x5, 0x1}, 0x9, [0xff, 0x23ed, 0x5, 0x8, 0x9, 0x2, 0x5, 0x0, 0x82f, 0x7, 0x1, 0x1ff, 0x5, 0xd0, 0x4, 0x8]}) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) 08:14:54 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x541b, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, 0x0) 08:14:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) 08:14:55 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r3, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, 0x0) 08:14:55 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x541b, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:55 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r3, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x541b, 0x0) 08:14:55 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)={0x0, 0x4, 0x8}) 08:14:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x10, 0x0) 08:14:55 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r3, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)={0x0, 0x0, 0x8}) 08:14:55 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r3, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0x60) 08:14:55 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000100)) 08:14:55 executing program 1: write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r3, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) 08:14:55 executing program 1: write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 4: write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) 08:14:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r0, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x10, &(0x7f0000000100)={0x2004, 0x4, 0x8}) 08:14:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r3, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 1: write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 4: write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) 08:14:55 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002080)={0x18, 0xffffffffffffffda, r2, {0x5}}, 0x18) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) 08:14:55 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r0, 0xcd5, 0x80000}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 4: write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) 08:14:55 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r0, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 2: write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x9}}}, 0x60) 08:14:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) 08:14:56 executing program 2: write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r0, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) 08:14:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:56 executing program 2: write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) 08:14:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r0, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:56 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r0, 0xcd5, 0x80000}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r0, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:56 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x101000) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r0, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r0, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:56 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r0, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r0, 0xcd5, 0x80000}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:56 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:56 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r0, 0xcd5, 0x80000}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:57 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0x60) 08:14:57 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:57 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0x60) 08:14:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) 08:14:57 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0x60) 08:14:57 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0x60) 08:14:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:57 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0x60) 08:14:57 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0x60) 08:14:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:57 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:57 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) 08:14:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:57 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:58 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:58 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:58 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r0, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:14:58 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0xcd5, 0x80000}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0x60) 08:14:58 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) 08:14:58 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0xffffffffffffffda, 0x0, {{0xe000000000000000, 0x6, 0x80, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x5, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:58 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) (fail_nth: 1) 08:14:58 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) (fail_nth: 1) [ 1342.632161][ T7265] FAULT_INJECTION: forcing a failure. [ 1342.632161][ T7265] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.666279][ T7265] CPU: 1 PID: 7265 Comm: syz-executor.1 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1342.676750][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1342.689602][ T7265] Call Trace: [ 1342.692902][ T7265] [ 1342.695844][ T7265] dump_stack_lvl+0xcd/0x134 [ 1342.700460][ T7265] should_fail.cold+0x5/0xa [ 1342.704968][ T7265] should_failslab+0x5/0x10 [ 1342.709489][ T7265] kmem_cache_alloc_node_trace+0x69/0x5b0 [ 1342.715212][ T7265] __kmalloc_node+0x38/0x60 [ 1342.719722][ T7265] kvmalloc_node+0x3e/0x190 [ 1342.724236][ T7265] file_tty_write.constprop.0+0x67b/0x900 [ 1342.729960][ T7265] ? n_tty_check_unthrottle+0x440/0x440 [ 1342.735509][ T7265] new_sync_write+0x38a/0x560 [ 1342.740190][ T7265] ? new_sync_read+0x5f0/0x5f0 [ 1342.744960][ T7265] ? inode_security+0x105/0x130 [ 1342.749815][ T7265] ? avc_policy_seqno+0x9/0x70 [ 1342.754577][ T7265] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1342.760296][ T7265] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1342.766535][ T7265] ? security_file_permission+0xab/0xd0 [ 1342.772080][ T7265] vfs_write+0x7c0/0xac0 [ 1342.776327][ T7265] ksys_write+0x127/0x250 [ 1342.780657][ T7265] ? __ia32_sys_read+0xb0/0xb0 [ 1342.785428][ T7265] ? syscall_enter_from_user_mode+0x21/0x70 [ 1342.791327][ T7265] do_syscall_64+0x35/0xb0 [ 1342.795744][ T7265] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1342.801650][ T7265] RIP: 0033:0x7fbc6e6890e9 [ 1342.806323][ T7265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 08:14:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:59 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) (fail_nth: 1) [ 1342.825929][ T7265] RSP: 002b:00007fbc6f7d3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1342.834344][ T7265] RAX: ffffffffffffffda RBX: 00007fbc6e79bf60 RCX: 00007fbc6e6890e9 [ 1342.842323][ T7265] RDX: 0000000000000060 RSI: 0000000020000380 RDI: 0000000000000003 [ 1342.850289][ T7265] RBP: 00007fbc6f7d31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1342.858255][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1342.866225][ T7265] R13: 00007ffcd1aa77ef R14: 00007fbc6f7d3300 R15: 0000000000022000 [ 1342.874204][ T7265] 08:14:59 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:59 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffa, 0x18, 0x9}}}, 0x60) 08:14:59 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffa, 0x18, 0x9}}}, 0x60) [ 1342.928858][ T7275] FAULT_INJECTION: forcing a failure. [ 1342.928858][ T7275] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.950487][ T7273] FAULT_INJECTION: forcing a failure. [ 1342.950487][ T7273] name failslab, interval 1, probability 0, space 0, times 0 08:14:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x9}}}, 0x60) 08:14:59 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffa, 0x18, 0x9}}}, 0x60) [ 1342.997821][ T7275] CPU: 1 PID: 7275 Comm: syz-executor.2 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1343.008278][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.018351][ T7275] Call Trace: [ 1343.021645][ T7275] [ 1343.024589][ T7275] dump_stack_lvl+0xcd/0x134 [ 1343.029218][ T7275] should_fail.cold+0x5/0xa [ 1343.033749][ T7275] should_failslab+0x5/0x10 [ 1343.038283][ T7275] kmem_cache_alloc_node_trace+0x69/0x5b0 08:14:59 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffa, 0x18, 0x9}}}, 0x60) [ 1343.044033][ T7275] __kmalloc_node+0x38/0x60 [ 1343.048566][ T7275] kvmalloc_node+0x3e/0x190 [ 1343.053096][ T7275] file_tty_write.constprop.0+0x67b/0x900 [ 1343.058853][ T7275] ? n_tty_check_unthrottle+0x440/0x440 [ 1343.064429][ T7275] new_sync_write+0x38a/0x560 [ 1343.069129][ T7275] ? new_sync_read+0x5f0/0x5f0 [ 1343.074004][ T7275] ? inode_security+0x105/0x130 [ 1343.079051][ T7275] ? avc_policy_seqno+0x9/0x70 [ 1343.083844][ T7275] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1343.089582][ T7275] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1343.095843][ T7275] ? security_file_permission+0xab/0xd0 [ 1343.101411][ T7275] vfs_write+0x7c0/0xac0 [ 1343.105678][ T7275] ksys_write+0x127/0x250 [ 1343.110021][ T7275] ? __ia32_sys_read+0xb0/0xb0 [ 1343.114795][ T7275] ? syscall_enter_from_user_mode+0x21/0x70 [ 1343.120698][ T7275] do_syscall_64+0x35/0xb0 [ 1343.125121][ T7275] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1343.131022][ T7275] RIP: 0033:0x7f7c232890e9 [ 1343.135437][ T7275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1343.155044][ T7275] RSP: 002b:00007f7c24419168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1343.163461][ T7275] RAX: ffffffffffffffda RBX: 00007f7c2339bf60 RCX: 00007f7c232890e9 [ 1343.171429][ T7275] RDX: 0000000000000060 RSI: 0000000020000380 RDI: 0000000000000003 [ 1343.179398][ T7275] RBP: 00007f7c244191d0 R08: 0000000000000000 R09: 0000000000000000 [ 1343.187395][ T7275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1343.195366][ T7275] R13: 00007ffc908ccc6f R14: 00007f7c24419300 R15: 0000000000022000 [ 1343.203344][ T7275] [ 1343.211323][ T7273] CPU: 0 PID: 7273 Comm: syz-executor.5 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1343.221775][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.231854][ T7273] Call Trace: [ 1343.235151][ T7273] [ 1343.238093][ T7273] dump_stack_lvl+0xcd/0x134 [ 1343.242719][ T7273] should_fail.cold+0x5/0xa [ 1343.247252][ T7273] should_failslab+0x5/0x10 [ 1343.251777][ T7273] kmem_cache_alloc_node_trace+0x69/0x5b0 [ 1343.257533][ T7273] __kmalloc_node+0x38/0x60 [ 1343.262064][ T7273] kvmalloc_node+0x3e/0x190 [ 1343.266592][ T7273] file_tty_write.constprop.0+0x67b/0x900 [ 1343.272337][ T7273] ? n_tty_check_unthrottle+0x440/0x440 [ 1343.278031][ T7273] new_sync_write+0x38a/0x560 [ 1343.282738][ T7273] ? new_sync_read+0x5f0/0x5f0 [ 1343.287527][ T7273] ? inode_security+0x105/0x130 [ 1343.292400][ T7273] ? avc_policy_seqno+0x9/0x70 [ 1343.297185][ T7273] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1343.302927][ T7273] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1343.309184][ T7273] ? security_file_permission+0xab/0xd0 [ 1343.314851][ T7273] vfs_write+0x7c0/0xac0 [ 1343.319124][ T7273] ksys_write+0x127/0x250 [ 1343.323479][ T7273] ? __ia32_sys_read+0xb0/0xb0 [ 1343.328270][ T7273] ? syscall_enter_from_user_mode+0x21/0x70 [ 1343.334189][ T7273] do_syscall_64+0x35/0xb0 [ 1343.338627][ T7273] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1343.344547][ T7273] RIP: 0033:0x7fe1440890e9 [ 1343.348978][ T7273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1343.368791][ T7273] RSP: 002b:00007fe145285168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1343.377235][ T7273] RAX: ffffffffffffffda RBX: 00007fe14419bf60 RCX: 00007fe1440890e9 [ 1343.385228][ T7273] RDX: 0000000000000060 RSI: 0000000020000380 RDI: 0000000000000003 08:14:59 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x9}}}, 0x60) 08:14:59 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffa, 0x18, 0x9}}}, 0x60) [ 1343.393223][ T7273] RBP: 00007fe1452851d0 R08: 0000000000000000 R09: 0000000000000000 [ 1343.401212][ T7273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1343.409208][ T7273] R13: 00007ffc52e40f7f R14: 00007fe145285300 R15: 0000000000022000 [ 1343.417200][ T7273] [ 1343.420329][ C0] vkms_vblank_simulate: vblank timer overrun 08:14:59 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) 08:14:59 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) (fail_nth: 2) 08:14:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x9}}}, 0x60) 08:14:59 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) (fail_nth: 2) 08:14:59 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x9}}}, 0x60) 08:14:59 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0x60) 08:14:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0x60) 08:14:59 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0x60) 08:14:59 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0xfdef}, 0x60) 08:14:59 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) [ 1343.710375][ T7306] FAULT_INJECTION: forcing a failure. [ 1343.710375][ T7306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1343.739703][ T7306] CPU: 0 PID: 7306 Comm: syz-executor.5 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1343.750172][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.760248][ T7306] Call Trace: [ 1343.763543][ T7306] [ 1343.766487][ T7306] dump_stack_lvl+0xcd/0x134 [ 1343.771115][ T7306] should_fail.cold+0x5/0xa [ 1343.775730][ T7306] _copy_from_iter+0x389/0x15a0 [ 1343.780620][ T7306] ? _copy_from_iter_nocache+0x1510/0x1510 [ 1343.786455][ T7306] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1343.792713][ T7306] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1343.798979][ T7306] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1343.805249][ T7306] ? __phys_addr_symbol+0x2c/0x70 [ 1343.810343][ T7306] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1343.816082][ T7306] ? __check_object_size+0x16c/0x4f0 [ 1343.821391][ T7306] file_tty_write.constprop.0+0x4cf/0x900 [ 1343.827147][ T7306] ? n_tty_check_unthrottle+0x440/0x440 [ 1343.832725][ T7306] new_sync_write+0x38a/0x560 [ 1343.837420][ T7306] ? new_sync_read+0x5f0/0x5f0 [ 1343.842216][ T7306] ? inode_security+0x105/0x130 [ 1343.847093][ T7306] ? avc_policy_seqno+0x9/0x70 [ 1343.851868][ T7306] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1343.857598][ T7306] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1343.863841][ T7306] ? security_file_permission+0xab/0xd0 [ 1343.869397][ T7306] vfs_write+0x7c0/0xac0 [ 1343.873643][ T7306] ksys_write+0x127/0x250 [ 1343.877978][ T7306] ? __ia32_sys_read+0xb0/0xb0 [ 1343.882771][ T7306] ? syscall_enter_from_user_mode+0x21/0x70 [ 1343.888672][ T7306] do_syscall_64+0x35/0xb0 [ 1343.893088][ T7306] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1343.898993][ T7306] RIP: 0033:0x7fe1440890e9 [ 1343.903412][ T7306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1343.923037][ T7306] RSP: 002b:00007fe145285168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1343.931469][ T7306] RAX: ffffffffffffffda RBX: 00007fe14419bf60 RCX: 00007fe1440890e9 [ 1343.939454][ T7306] RDX: 0000000000000060 RSI: 0000000020000380 RDI: 0000000000000003 [ 1343.947437][ T7306] RBP: 00007fe1452851d0 R08: 0000000000000000 R09: 0000000000000000 08:14:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) [ 1343.955423][ T7306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1343.963405][ T7306] R13: 00007ffc52e40f7f R14: 00007fe145285300 R15: 0000000000022000 [ 1343.971393][ T7306] [ 1343.974548][ C0] vkms_vblank_simulate: vblank timer overrun 08:15:00 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x9}}}, 0x60) 08:15:00 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x9}}}, 0x60) [ 1344.001824][ T7308] FAULT_INJECTION: forcing a failure. [ 1344.001824][ T7308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1344.058769][ T7308] CPU: 0 PID: 7308 Comm: syz-executor.2 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1344.069360][ T7308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1344.079435][ T7308] Call Trace: [ 1344.082728][ T7308] [ 1344.085659][ T7308] dump_stack_lvl+0xcd/0x134 [ 1344.090528][ T7308] should_fail.cold+0x5/0xa [ 1344.095051][ T7308] _copy_from_user+0x2a/0x170 [ 1344.099736][ T7308] kstrtouint_from_user+0xa8/0x190 [ 1344.104858][ T7308] ? kstrtouint+0x120/0x120 [ 1344.109376][ T7308] ? lock_release+0x720/0x720 [ 1344.114076][ T7308] proc_fail_nth_write+0x79/0x220 [ 1344.119117][ T7308] ? proc_task_getattr+0x1f0/0x1f0 [ 1344.124235][ T7308] ? proc_task_getattr+0x1f0/0x1f0 [ 1344.129351][ T7308] vfs_write+0x269/0xac0 [ 1344.133608][ T7308] ksys_write+0x127/0x250 [ 1344.137945][ T7308] ? __ia32_sys_read+0xb0/0xb0 [ 1344.142719][ T7308] ? syscall_enter_from_user_mode+0x21/0x70 [ 1344.148617][ T7308] do_syscall_64+0x35/0xb0 [ 1344.153063][ T7308] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1344.158974][ T7308] RIP: 0033:0x7f7c2323bbff [ 1344.163391][ T7308] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1344.183004][ T7308] RSP: 002b:00007f7c243f8160 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1344.191782][ T7308] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7c2323bbff [ 1344.199761][ T7308] RDX: 0000000000000001 RSI: 00007f7c243f81e0 RDI: 0000000000000003 [ 1344.207823][ T7308] RBP: 00007f7c243f81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1344.215800][ T7308] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1344.223774][ T7308] R13: 00007ffc908ccc6f R14: 00007f7c243f8300 R15: 0000000000022000 [ 1344.231749][ T7308] [ 1344.235782][ C0] vkms_vblank_simulate: vblank timer overrun 08:15:00 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) (fail_nth: 3) 08:15:00 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0x60) 08:15:00 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0xfffffdef}, 0x60) 08:15:00 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) 08:15:00 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffa, 0x18, 0x9}}}, 0x60) 08:15:00 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) (fail_nth: 1) 08:15:00 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) 08:15:00 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) 08:15:00 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0xfdef}, 0x60) 08:15:00 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) [ 1344.443895][ T7332] FAULT_INJECTION: forcing a failure. [ 1344.443895][ T7332] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.449855][ T7334] FAULT_INJECTION: forcing a failure. [ 1344.449855][ T7334] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.450156][ T7334] [ 1344.450162][ T7334] ====================================================== [ 1344.450169][ T7334] WARNING: possible circular locking dependency detected [ 1344.450177][ T7334] 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 Not tainted [ 1344.450190][ T7334] ------------------------------------------------------ [ 1344.450197][ T7334] syz-executor.5/7334 is trying to acquire lock: [ 1344.450208][ T7334] ffffffff8bc8dc00 (console_owner){-...}-{0:0}, at: vprintk_emit+0x316/0x5f0 [ 1344.450300][ T7334] [ 1344.450300][ T7334] but task is already holding lock: [ 1344.450306][ T7334] ffff888077dfe958 (&port->lock){-.-.}-{2:2}, at: pty_write+0xea/0x1e0 [ 1344.450354][ T7334] [ 1344.450354][ T7334] which lock already depends on the new lock. [ 1344.450354][ T7334] [ 1344.450361][ T7334] [ 1344.450361][ T7334] the existing dependency chain (in reverse order) is: [ 1344.450367][ T7334] [ 1344.450367][ T7334] -> #2 (&port->lock){-.-.}-{2:2}: [ 1344.450392][ T7334] _raw_spin_lock_irqsave+0x39/0x50 [ 1344.450419][ T7334] tty_port_tty_get+0x1f/0x100 [ 1344.450439][ T7334] tty_port_default_wakeup+0x11/0x40 [ 1344.450459][ T7334] serial8250_tx_chars+0x4f3/0xa50 [ 1344.450527][ T7334] serial8250_handle_irq.part.0+0x328/0x3d0 [ 1344.450553][ T7334] serial8250_default_handle_irq+0xb2/0x220 [ 1344.450580][ T7334] serial8250_interrupt+0xfd/0x200 [ 1344.450603][ T7334] __handle_irq_event_percpu+0x22b/0x880 [ 1344.450625][ T7334] handle_irq_event+0xa7/0x1e0 [ 1344.450650][ T7334] handle_edge_irq+0x25f/0xd00 [ 1344.450672][ T7334] __common_interrupt+0x9d/0x210 [ 1344.450741][ T7334] common_interrupt+0xa4/0xc0 [ 1344.450762][ T7334] asm_common_interrupt+0x1e/0x40 [ 1344.450789][ T7334] acpi_idle_do_entry+0x1c6/0x250 [ 1344.450815][ T7334] acpi_idle_enter+0x361/0x500 [ 1344.450888][ T7334] cpuidle_enter_state+0x1b1/0xc80 [ 1344.450955][ T7334] cpuidle_enter+0x4a/0xa0 [ 1344.450975][ T7334] do_idle+0x3e8/0x590 [ 1344.451016][ T7334] cpu_startup_entry+0x14/0x20 [ 1344.451036][ T7334] rest_init+0x169/0x270 [ 1344.451058][ T7334] arch_call_rest_init+0xf/0x14 [ 1344.451118][ T7334] start_kernel+0x47f/0x4a0 [ 1344.451138][ T7334] secondary_startup_64_no_verify+0xc3/0xcb [ 1344.451174][ T7334] [ 1344.451174][ T7334] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 1344.451202][ T7334] _raw_spin_lock_irqsave+0x39/0x50 [ 1344.451227][ T7334] serial8250_console_write+0x9cb/0xc30 [ 1344.451252][ T7334] console_unlock+0x9bc/0xdd0 [ 1344.451276][ T7334] vprintk_emit+0x1b4/0x5f0 [ 1344.451300][ T7334] vprintk+0x80/0x90 [ 1344.451323][ T7334] _printk+0xba/0xed [ 1344.451354][ T7334] register_console+0x410/0x7c0 [ 1344.451378][ T7334] univ8250_console_init+0x3a/0x46 [ 1344.451419][ T7334] console_init+0x3c1/0x58d [ 1344.451445][ T7334] start_kernel+0x30b/0x4a0 [ 1344.451465][ T7334] secondary_startup_64_no_verify+0xc3/0xcb [ 1344.451492][ T7334] [ 1344.451492][ T7334] -> #0 (console_owner){-...}-{0:0}: [ 1344.451519][ T7334] __lock_acquire+0x2ac6/0x56c0 [ 1344.451544][ T7334] lock_acquire+0x1ab/0x510 [ 1344.451566][ T7334] vprintk_emit+0x353/0x5f0 [ 1344.451590][ T7334] vprintk+0x80/0x90 [ 1344.451613][ T7334] _printk+0xba/0xed [ 1344.451633][ T7334] should_fail+0x472/0x5a0 [ 1344.451684][ T7334] should_failslab+0x5/0x10 [ 1344.451713][ T7334] __kmalloc+0x7b/0x4d0 [ 1344.451738][ T7334] tty_buffer_alloc+0x23f/0x2a0 [ 1344.451766][ T7334] __tty_buffer_request_room+0x156/0x2a0 [ 1344.451795][ T7334] tty_insert_flip_string_fixed_flag+0x8c/0x240 [ 1344.451824][ T7334] pty_write+0x11c/0x1e0 [ 1344.451844][ T7334] n_tty_write+0xa7a/0xfc0 [ 1344.451868][ T7334] file_tty_write.constprop.0+0x520/0x900 [ 1344.451892][ T7334] new_sync_write+0x38a/0x560 [ 1344.451917][ T7334] vfs_write+0x7c0/0xac0 [ 1344.451940][ T7334] ksys_write+0x127/0x250 [ 1344.451962][ T7334] do_syscall_64+0x35/0xb0 [ 1344.451981][ T7334] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1344.452007][ T7334] [ 1344.452007][ T7334] other info that might help us debug this: [ 1344.452007][ T7334] [ 1344.452014][ T7334] Chain exists of: [ 1344.452014][ T7334] console_owner --> &port_lock_key --> &port->lock [ 1344.452014][ T7334] [ 1344.452043][ T7334] Possible unsafe locking scenario: [ 1344.452043][ T7334] [ 1344.452048][ T7334] CPU0 CPU1 [ 1344.452053][ T7334] ---- ---- [ 1344.452057][ T7334] lock(&port->lock); [ 1344.452069][ T7334] lock(&port_lock_key); [ 1344.452082][ T7334] lock(&port->lock); [ 1344.452094][ T7334] lock(console_owner); [ 1344.452106][ T7334] [ 1344.452106][ T7334] *** DEADLOCK *** [ 1344.452106][ T7334] [ 1344.452110][ T7334] 5 locks held by syz-executor.5/7334: [ 1344.452123][ T7334] #0: ffff888059d70098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1344.452178][ T7334] #1: ffff888059d70130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write.constprop.0+0x299/0x900 [ 1344.452231][ T7334] #2: ffff888059d702e8 (&tty->termios_rwsem){++++}-{3:3}, at: n_tty_write+0x1bf/0xfc0 [ 1344.452283][ T7334] #3: ffffc90003eb3378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0xa47/0xfc0 [ 1344.452334][ T7334] #4: ffff888077dfe958 (&port->lock){-.-.}-{2:2}, at: pty_write+0xea/0x1e0 [ 1344.452381][ T7334] [ 1344.452381][ T7334] stack backtrace: [ 1344.452387][ T7334] CPU: 0 PID: 7334 Comm: syz-executor.5 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1344.452411][ T7334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1344.452425][ T7334] Call Trace: [ 1344.452431][ T7334] [ 1344.452439][ T7334] dump_stack_lvl+0xcd/0x134 [ 1344.452469][ T7334] check_noncircular+0x25f/0x2e0 [ 1344.452497][ T7334] ? filter_irq_stacks+0x90/0x90 [ 1344.452523][ T7334] ? print_circular_bug+0x1e0/0x1e0 [ 1344.452548][ T7334] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1344.452572][ T7334] ? add_lock_to_list.constprop.0+0x185/0x370 [ 1344.452599][ T7334] __lock_acquire+0x2ac6/0x56c0 [ 1344.452625][ T7334] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1344.452664][ T7334] lock_acquire+0x1ab/0x510 [ 1344.452691][ T7334] ? vprintk_emit+0x316/0x5f0 [ 1344.452717][ T7334] ? lock_release+0x720/0x720 [ 1344.452742][ T7334] ? lock_downgrade+0x6e0/0x6e0 [ 1344.452765][ T7334] ? do_raw_spin_lock+0x120/0x2a0 [ 1344.452792][ T7334] ? rwlock_bug.part.0+0x90/0x90 [ 1344.452818][ T7334] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1344.452844][ T7334] vprintk_emit+0x353/0x5f0 [ 1344.452867][ T7334] ? vprintk_emit+0x316/0x5f0 [ 1344.452890][ T7334] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1344.452917][ T7334] vprintk+0x80/0x90 [ 1344.452942][ T7334] _printk+0xba/0xed [ 1344.452965][ T7334] ? record_print_text.cold+0x16/0x16 [ 1344.452992][ T7334] ? ___ratelimit+0x222/0x4b0 [ 1344.453017][ T7334] should_fail+0x472/0x5a0 [ 1344.453044][ T7334] should_failslab+0x5/0x10 [ 1344.453071][ T7334] __kmalloc+0x7b/0x4d0 [ 1344.453096][ T7334] ? tty_buffer_alloc+0x23f/0x2a0 [ 1344.453124][ T7334] tty_buffer_alloc+0x23f/0x2a0 [ 1344.453152][ T7334] __tty_buffer_request_room+0x156/0x2a0 [ 1344.453182][ T7334] tty_insert_flip_string_fixed_flag+0x8c/0x240 [ 1344.453214][ T7334] pty_write+0x11c/0x1e0 [ 1344.453235][ T7334] n_tty_write+0xa7a/0xfc0 [ 1344.453260][ T7334] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1344.453282][ T7334] ? _copy_from_iter+0x12b/0x15a0 [ 1344.453310][ T7334] ? n_tty_check_unthrottle+0x440/0x440 [ 1344.453337][ T7334] ? __init_waitqueue_head+0xd0/0xd0 [ 1344.453362][ T7334] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1344.453384][ T7334] ? __phys_addr_symbol+0x2c/0x70 [ 1344.453411][ T7334] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1344.453433][ T7334] ? __check_object_size+0x16c/0x4f0 [ 1344.453454][ T7334] file_tty_write.constprop.0+0x520/0x900 [ 1344.453480][ T7334] ? n_tty_check_unthrottle+0x440/0x440 [ 1344.453508][ T7334] new_sync_write+0x38a/0x560 [ 1344.453533][ T7334] ? new_sync_read+0x5f0/0x5f0 [ 1344.453558][ T7334] ? inode_security+0x105/0x130 [ 1344.453583][ T7334] ? avc_policy_seqno+0x9/0x70 [ 1344.453607][ T7334] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1344.453629][ T7334] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1344.453657][ T7334] ? security_file_permission+0xab/0xd0 [ 1344.453683][ T7334] vfs_write+0x7c0/0xac0 [ 1344.453710][ T7334] ksys_write+0x127/0x250 [ 1344.453736][ T7334] ? __ia32_sys_read+0xb0/0xb0 [ 1344.453761][ T7334] ? syscall_enter_from_user_mode+0x21/0x70 [ 1344.453788][ T7334] do_syscall_64+0x35/0xb0 [ 1344.453807][ T7334] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1344.453836][ T7334] RIP: 0033:0x7fe1440890e9 [ 1344.453852][ T7334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1344.453874][ T7334] RSP: 002b:00007fe145285168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1344.453896][ T7334] RAX: ffffffffffffffda RBX: 00007fe14419bf60 RCX: 00007fe1440890e9 [ 1344.453913][ T7334] RDX: 0000000000000060 RSI: 0000000020000380 RDI: 0000000000000003 [ 1344.453928][ T7334] RBP: 00007fe1452851d0 R08: 0000000000000000 R09: 0000000000000000 [ 1344.453943][ T7334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.453957][ T7334] R13: 00007ffc52e40f7f R14: 00007fe145285300 R15: 0000000000022000 [ 1344.453974][ T7334] [ 1344.513045][ T7332] CPU: 1 PID: 7332 Comm: syz-executor.3 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1345.374026][ T7332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1345.384169][ T7332] Call Trace: [ 1345.387448][ T7332] [ 1345.390809][ T7332] dump_stack_lvl+0xcd/0x134 [ 1345.395407][ T7332] should_fail.cold+0x5/0xa [ 1345.399911][ T7332] should_failslab+0x5/0x10 [ 1345.404418][ T7332] kmem_cache_alloc_node_trace+0x69/0x5b0 [ 1345.410142][ T7332] __kmalloc_node+0x38/0x60 [ 1345.414650][ T7332] kvmalloc_node+0x3e/0x190 [ 1345.419155][ T7332] file_tty_write.constprop.0+0x67b/0x900 [ 1345.424878][ T7332] ? n_tty_check_unthrottle+0x440/0x440 [ 1345.430425][ T7332] new_sync_write+0x38a/0x560 [ 1345.435104][ T7332] ? new_sync_read+0x5f0/0x5f0 [ 1345.439867][ T7332] ? inode_security+0x105/0x130 [ 1345.444716][ T7332] ? avc_policy_seqno+0x9/0x70 [ 1345.449483][ T7332] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1345.455200][ T7332] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1345.461435][ T7332] ? security_file_permission+0xab/0xd0 [ 1345.466984][ T7332] vfs_write+0x7c0/0xac0 [ 1345.471227][ T7332] ksys_write+0x127/0x250 [ 1345.475555][ T7332] ? __ia32_sys_read+0xb0/0xb0 [ 1345.480322][ T7332] ? syscall_enter_from_user_mode+0x21/0x70 [ 1345.486219][ T7332] do_syscall_64+0x35/0xb0 [ 1345.490641][ T7332] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1345.496582][ T7332] RIP: 0033:0x7f2c616890e9 [ 1345.500998][ T7332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1345.520602][ T7332] RSP: 002b:00007f2c62779168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1345.529015][ T7332] RAX: ffffffffffffffda RBX: 00007f2c6179bf60 RCX: 00007f2c616890e9 [ 1345.536990][ T7332] RDX: 0000000000000060 RSI: 0000000020000380 RDI: 0000000000000003 08:15:01 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) 08:15:01 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) [ 1345.544955][ T7332] RBP: 00007f2c627791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1345.552929][ T7332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1345.560902][ T7332] R13: 00007fffd01aefef R14: 00007f2c62779300 R15: 0000000000022000 [ 1345.568998][ T7332] [ 1345.572032][ T7334] CPU: 0 PID: 7334 Comm: syz-executor.5 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1345.582548][ T7334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1345.592616][ T7334] Call Trace: [ 1345.595907][ T7334] [ 1345.598849][ T7334] dump_stack_lvl+0xcd/0x134 [ 1345.603467][ T7334] should_fail.cold+0x5/0xa [ 1345.608085][ T7334] should_failslab+0x5/0x10 [ 1345.612618][ T7334] __kmalloc+0x7b/0x4d0 [ 1345.616799][ T7334] ? tty_buffer_alloc+0x23f/0x2a0 [ 1345.621850][ T7334] tty_buffer_alloc+0x23f/0x2a0 [ 1345.626727][ T7334] __tty_buffer_request_room+0x156/0x2a0 [ 1345.632477][ T7334] tty_insert_flip_string_fixed_flag+0x8c/0x240 [ 1345.638753][ T7334] pty_write+0x11c/0x1e0 [ 1345.643018][ T7334] n_tty_write+0xa7a/0xfc0 [ 1345.647467][ T7334] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1345.653735][ T7334] ? _copy_from_iter+0x12b/0x15a0 [ 1345.658790][ T7334] ? n_tty_check_unthrottle+0x440/0x440 [ 1345.664365][ T7334] ? __init_waitqueue_head+0xd0/0xd0 [ 1345.669678][ T7334] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1345.675942][ T7334] ? __phys_addr_symbol+0x2c/0x70 [ 1345.680994][ T7334] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1345.686733][ T7334] ? __check_object_size+0x16c/0x4f0 [ 1345.692041][ T7334] file_tty_write.constprop.0+0x520/0x900 [ 1345.697791][ T7334] ? n_tty_check_unthrottle+0x440/0x440 [ 1345.703373][ T7334] new_sync_write+0x38a/0x560 [ 1345.708095][ T7334] ? new_sync_read+0x5f0/0x5f0 [ 1345.712891][ T7334] ? inode_security+0x105/0x130 [ 1345.717768][ T7334] ? avc_policy_seqno+0x9/0x70 [ 1345.722555][ T7334] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1345.728296][ T7334] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1345.734561][ T7334] ? security_file_permission+0xab/0xd0 [ 1345.740139][ T7334] vfs_write+0x7c0/0xac0 [ 1345.744425][ T7334] ksys_write+0x127/0x250 [ 1345.749126][ T7334] ? __ia32_sys_read+0xb0/0xb0 [ 1345.753917][ T7334] ? syscall_enter_from_user_mode+0x21/0x70 [ 1345.759840][ T7334] do_syscall_64+0x35/0xb0 [ 1345.764279][ T7334] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1345.770200][ T7334] RIP: 0033:0x7fe1440890e9 [ 1345.774631][ T7334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1345.794256][ T7334] RSP: 002b:00007fe145285168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1345.802685][ T7334] RAX: ffffffffffffffda RBX: 00007fe14419bf60 RCX: 00007fe1440890e9 [ 1345.810672][ T7334] RDX: 0000000000000060 RSI: 0000000020000380 RDI: 0000000000000003 [ 1345.818661][ T7334] RBP: 00007fe1452851d0 R08: 0000000000000000 R09: 0000000000000000 [ 1345.826652][ T7334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1345.834634][ T7334] R13: 00007ffc52e40f7f R14: 00007fe145285300 R15: 0000000000022000 [ 1345.842626][ T7334] [ 1345.845693][ C0] vkms_vblank_simulate: vblank timer overrun 08:15:02 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) 08:15:02 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) 08:15:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x2}, 0x60) 08:15:02 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) 08:15:02 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) 08:15:02 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0xfffffdef}, 0x60) 08:15:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x3}, 0x60) 08:15:02 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) 08:15:02 executing program 4: write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60}, 0x60) 08:15:02 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) 08:15:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x7}, 0x60) 08:15:02 executing program 4: write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60}, 0x60) 08:15:02 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0xfdef}, 0x60) 08:15:02 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0xfdef}, 0x60) 08:15:02 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x2}, 0x60) 08:15:02 executing program 4: write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60}, 0x60) 08:15:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x60}, 0x60) 08:15:02 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) 08:15:02 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60}, 0x60) 08:15:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x300}, 0x60) 08:15:02 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0xfffffdef}, 0x60) 08:15:02 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x3}, 0x60) 08:15:02 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0xfffffdef}, 0x60) 08:15:02 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) 08:15:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x700}, 0x60) 08:15:02 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60}, 0x60) 08:15:02 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x7}, 0x60) 08:15:02 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) 08:15:02 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) 08:15:02 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (fail_nth: 1) 08:15:02 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x2}, 0x60) 08:15:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x1f00}, 0x60) 08:15:02 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x60}, 0x60) 08:15:02 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x2}, 0x60) 08:15:02 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000380)={0x60}, 0x60) [ 1346.301901][ T7406] FAULT_INJECTION: forcing a failure. [ 1346.301901][ T7406] name failslab, interval 1, probability 0, space 0, times 0 08:15:02 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x3}, 0x60) 08:15:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x2000}, 0x60) 08:15:02 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x3}, 0x60) 08:15:02 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x300}, 0x60) 08:15:02 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:15:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x6000}, 0x60) [ 1346.446983][ T7406] CPU: 1 PID: 7406 Comm: syz-executor.0 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1346.457438][ T7406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1346.467509][ T7406] Call Trace: [ 1346.470801][ T7406] [ 1346.473743][ T7406] dump_stack_lvl+0xcd/0x134 [ 1346.478356][ T7406] should_fail.cold+0x5/0xa [ 1346.482979][ T7406] should_failslab+0x5/0x10 [ 1346.487510][ T7406] kmem_cache_alloc+0x5d/0x560 [ 1346.492300][ T7406] ? lock_downgrade+0x6e0/0x6e0 [ 1346.497176][ T7406] getname_flags.part.0+0x50/0x4f0 [ 1346.502314][ T7406] getname+0x8e/0xd0 [ 1346.506230][ T7406] do_sys_openat2+0xf5/0x4c0 [ 1346.510931][ T7406] ? rcu_read_lock_sched_held+0xd/0x70 [ 1346.516410][ T7406] ? lock_acquire+0x442/0x510 [ 1346.521108][ T7406] ? build_open_flags+0x6f0/0x6f0 [ 1346.526170][ T7406] ? lock_downgrade+0x6e0/0x6e0 [ 1346.531050][ T7406] __x64_sys_openat+0x13f/0x1f0 [ 1346.535919][ T7406] ? __ia32_sys_open+0x1c0/0x1c0 [ 1346.540881][ T7406] ? syscall_enter_from_user_mode+0x21/0x70 [ 1346.546813][ T7406] do_syscall_64+0x35/0xb0 [ 1346.551247][ T7406] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1346.557167][ T7406] RIP: 0033:0x7efea4c3c004 [ 1346.561596][ T7406] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1346.581306][ T7406] RSP: 002b:00007efea5dd0ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1346.589732][ T7406] RAX: ffffffffffffffda RBX: 00007efea4d9bf60 RCX: 00007efea4c3c004 08:15:02 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (fail_nth: 2) 08:15:02 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x700}, 0x60) 08:15:02 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:15:02 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x7}, 0x60) 08:15:02 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x7}, 0x60) 08:15:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x20000}, 0x60) [ 1346.597806][ T7406] RDX: 0000000000000002 RSI: 00007efea5dd0d40 RDI: 00000000ffffff9c [ 1346.605877][ T7406] RBP: 00007efea5dd0d40 R08: 0000000000000000 R09: 000000000000000e [ 1346.613872][ T7406] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1346.621865][ T7406] R13: 00007ffc6e04f92f R14: 00007efea5dd1300 R15: 0000000000022000 [ 1346.629862][ T7406] 08:15:02 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x60}, 0x60) 08:15:02 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x60}, 0x60) 08:15:02 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x1f00}, 0x60) 08:15:02 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:15:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x200000}, 0x60) 08:15:02 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x2000}, 0x60) [ 1346.748724][ T7446] FAULT_INJECTION: forcing a failure. [ 1346.748724][ T7446] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1346.761958][ T7446] CPU: 0 PID: 7446 Comm: syz-executor.0 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1346.772389][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1346.782459][ T7446] Call Trace: [ 1346.785743][ T7446] [ 1346.788680][ T7446] dump_stack_lvl+0xcd/0x134 [ 1346.793293][ T7446] should_fail.cold+0x5/0xa [ 1346.797823][ T7446] prepare_alloc_pages+0x17b/0x570 [ 1346.802958][ T7446] __alloc_pages+0x12f/0x500 [ 1346.807573][ T7446] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 1346.814360][ T7446] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1346.820618][ T7446] ? _kstrtoull+0x13f/0x1f0 [ 1346.825142][ T7446] ? lock_acquire+0x442/0x510 [ 1346.829843][ T7446] ? lock_release+0x720/0x720 [ 1346.834545][ T7446] cache_grow_begin+0x75/0x350 [ 1346.839335][ T7446] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1346.844827][ T7446] cache_alloc_refill+0x27f/0x380 [ 1346.849880][ T7446] kmem_cache_alloc+0x450/0x560 [ 1346.854767][ T7446] getname_flags.part.0+0x50/0x4f0 [ 1346.859903][ T7446] getname+0x8e/0xd0 [ 1346.863818][ T7446] do_sys_openat2+0xf5/0x4c0 [ 1346.868415][ T7446] ? rcu_read_lock_sched_held+0xd/0x70 [ 1346.873876][ T7446] ? lock_acquire+0x442/0x510 [ 1346.878558][ T7446] ? build_open_flags+0x6f0/0x6f0 [ 1346.883581][ T7446] ? lock_downgrade+0x6e0/0x6e0 [ 1346.888431][ T7446] __x64_sys_openat+0x13f/0x1f0 [ 1346.893631][ T7446] ? __ia32_sys_open+0x1c0/0x1c0 [ 1346.898570][ T7446] ? syscall_enter_from_user_mode+0x21/0x70 [ 1346.904473][ T7446] do_syscall_64+0x35/0xb0 [ 1346.908886][ T7446] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1346.914791][ T7446] RIP: 0033:0x7efea4c3c004 [ 1346.919199][ T7446] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1346.938803][ T7446] RSP: 002b:00007efea5dd0ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1346.947211][ T7446] RAX: ffffffffffffffda RBX: 00007efea4d9bf60 RCX: 00007efea4c3c004 [ 1346.955177][ T7446] RDX: 0000000000000002 RSI: 00007efea5dd0d40 RDI: 00000000ffffff9c [ 1346.963142][ T7446] RBP: 00007efea5dd0d40 R08: 0000000000000000 R09: 000000000000000e [ 1346.971105][ T7446] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1346.979070][ T7446] R13: 00007ffc6e04f92f R14: 00007efea5dd1300 R15: 0000000000022000 [ 1346.987041][ T7446] 08:15:03 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (fail_nth: 3) 08:15:03 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x1000000}, 0x60) 08:15:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x6000}, 0x60) 08:15:03 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x300}, 0x60) 08:15:03 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x2000}, 0x60) 08:15:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x300}, 0x60) 08:15:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x20000}, 0x60) 08:15:03 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x60}, 0x60) [ 1347.104210][ T7467] FAULT_INJECTION: forcing a failure. [ 1347.104210][ T7467] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.132594][ T7467] CPU: 0 PID: 7467 Comm: syz-executor.0 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1347.143046][ T7467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1347.153129][ T7467] Call Trace: [ 1347.156424][ T7467] [ 1347.159364][ T7467] dump_stack_lvl+0xcd/0x134 [ 1347.164082][ T7467] should_fail.cold+0x5/0xa [ 1347.168614][ T7467] should_failslab+0x5/0x10 [ 1347.173142][ T7467] kmem_cache_alloc+0x5d/0x560 [ 1347.177927][ T7467] ? stack_trace_save+0x8c/0xc0 [ 1347.182802][ T7467] __alloc_file+0x21/0x270 [ 1347.187241][ T7467] alloc_empty_file+0x6d/0x170 [ 1347.192281][ T7467] path_openat+0xe4/0x2910 [ 1347.196711][ T7467] ? kmem_cache_alloc+0x265/0x560 08:15:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x700}, 0x60) 08:15:03 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x700}, 0x60) 08:15:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x200000}, 0x60) [ 1347.201756][ T7467] ? getname_flags.part.0+0x50/0x4f0 [ 1347.207057][ T7467] ? getname+0x8e/0xd0 [ 1347.211142][ T7467] ? do_sys_openat2+0xf5/0x4c0 [ 1347.215928][ T7467] ? __x64_sys_openat+0x13f/0x1f0 [ 1347.220974][ T7467] ? do_syscall_64+0x35/0xb0 [ 1347.225678][ T7467] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1347.231766][ T7467] ? path_lookupat+0x860/0x860 [ 1347.236548][ T7467] ? rcu_read_lock_sched_held+0xd/0x70 [ 1347.242030][ T7467] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1347.248371][ T7467] ? _kstrtoull+0x13f/0x1f0 [ 1347.252905][ T7467] ? _parse_integer+0x30/0x30 [ 1347.257603][ T7467] do_filp_open+0x1aa/0x400 [ 1347.262122][ T7467] ? may_open_dev+0xf0/0xf0 [ 1347.266640][ T7467] ? lock_release+0x522/0x720 [ 1347.271336][ T7467] ? alloc_fd+0x2f0/0x670 [ 1347.275680][ T7467] ? lock_downgrade+0x6e0/0x6e0 [ 1347.280548][ T7467] ? rwlock_bug.part.0+0x90/0x90 [ 1347.285514][ T7467] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1347.292294][ T7467] ? _find_next_bit+0x1e3/0x260 [ 1347.297175][ T7467] ? _raw_spin_unlock+0x24/0x40 [ 1347.302048][ T7467] ? alloc_fd+0x2f0/0x670 [ 1347.306454][ T7467] do_sys_openat2+0x16d/0x4c0 [ 1347.311150][ T7467] ? rcu_read_lock_sched_held+0xd/0x70 [ 1347.316632][ T7467] ? lock_acquire+0x442/0x510 [ 1347.321328][ T7467] ? build_open_flags+0x6f0/0x6f0 [ 1347.326373][ T7467] ? lock_downgrade+0x6e0/0x6e0 [ 1347.331246][ T7467] __x64_sys_openat+0x13f/0x1f0 [ 1347.336115][ T7467] ? __ia32_sys_open+0x1c0/0x1c0 [ 1347.341098][ T7467] ? syscall_enter_from_user_mode+0x21/0x70 [ 1347.347009][ T7467] do_syscall_64+0x35/0xb0 [ 1347.351438][ T7467] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1347.357356][ T7467] RIP: 0033:0x7efea4c3c004 [ 1347.361778][ T7467] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1347.381398][ T7467] RSP: 002b:00007efea5dd0ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1347.390030][ T7467] RAX: ffffffffffffffda RBX: 00007efea4d9bf60 RCX: 00007efea4c3c004 08:15:03 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x2000000}, 0x60) [ 1347.398018][ T7467] RDX: 0000000000000002 RSI: 00007efea5dd0d40 RDI: 00000000ffffff9c [ 1347.406004][ T7467] RBP: 00007efea5dd0d40 R08: 0000000000000000 R09: 000000000000000e [ 1347.414015][ T7467] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1347.422002][ T7467] R13: 00007ffc6e04f92f R14: 00007efea5dd1300 R15: 0000000000022000 [ 1347.429990][ T7467] 08:15:03 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (fail_nth: 4) 08:15:03 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x2}, 0x60) 08:15:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x1000000}, 0x60) 08:15:03 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x2000}, 0x60) 08:15:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x2000}, 0x60) 08:15:03 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x3000000}, 0x60) 08:15:03 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x6000}, 0x60) 08:15:03 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) (fail_nth: 1) 08:15:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x2000000}, 0x60) 08:15:03 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x7000000}, 0x60) 08:15:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x6000}, 0x60) 08:15:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x3000000}, 0x60) [ 1347.591629][ T7496] FAULT_INJECTION: forcing a failure. [ 1347.591629][ T7496] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.598233][ T7500] FAULT_INJECTION: forcing a failure. [ 1347.598233][ T7500] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.651382][ T7496] CPU: 1 PID: 7496 Comm: syz-executor.0 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1347.661846][ T7496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1347.671929][ T7496] Call Trace: [ 1347.675209][ T7496] [ 1347.678145][ T7496] dump_stack_lvl+0xcd/0x134 [ 1347.682764][ T7496] should_fail.cold+0x5/0xa [ 1347.687296][ T7496] should_failslab+0x5/0x10 [ 1347.692075][ T7496] kmem_cache_alloc+0x5d/0x560 [ 1347.696859][ T7496] ? stack_trace_save+0x8c/0xc0 [ 1347.701732][ T7496] __alloc_file+0x21/0x270 [ 1347.706180][ T7496] alloc_empty_file+0x6d/0x170 [ 1347.710958][ T7496] path_openat+0xe4/0x2910 [ 1347.715471][ T7496] ? kmem_cache_alloc+0x265/0x560 [ 1347.720516][ T7496] ? getname_flags.part.0+0x50/0x4f0 [ 1347.725813][ T7496] ? getname+0x8e/0xd0 [ 1347.729893][ T7496] ? do_sys_openat2+0xf5/0x4c0 [ 1347.734663][ T7496] ? __x64_sys_openat+0x13f/0x1f0 [ 1347.739706][ T7496] ? do_syscall_64+0x35/0xb0 [ 1347.744315][ T7496] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1347.750491][ T7496] ? path_lookupat+0x860/0x860 [ 1347.755264][ T7496] ? lock_acquire+0x442/0x510 [ 1347.760071][ T7496] ? lock_release+0x720/0x720 [ 1347.764768][ T7496] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1347.771066][ T7496] ? rcu_read_lock_sched_held+0xd/0x70 [ 1347.776550][ T7496] ? lock_release+0x522/0x720 [ 1347.781241][ T7496] do_filp_open+0x1aa/0x400 [ 1347.785763][ T7496] ? may_open_dev+0xf0/0xf0 [ 1347.790282][ T7496] ? lock_release+0x522/0x720 [ 1347.794977][ T7496] ? alloc_fd+0x2f0/0x670 [ 1347.799322][ T7496] ? lock_downgrade+0x6e0/0x6e0 [ 1347.804196][ T7496] ? rwlock_bug.part.0+0x90/0x90 [ 1347.809169][ T7496] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1347.815424][ T7496] ? _find_next_bit+0x1e3/0x260 [ 1347.820298][ T7496] ? _raw_spin_unlock+0x24/0x40 [ 1347.825164][ T7496] ? alloc_fd+0x2f0/0x670 [ 1347.829515][ T7496] do_sys_openat2+0x16d/0x4c0 [ 1347.834208][ T7496] ? rcu_read_lock_sched_held+0xd/0x70 [ 1347.839686][ T7496] ? lock_acquire+0x442/0x510 [ 1347.844394][ T7496] ? build_open_flags+0x6f0/0x6f0 [ 1347.849439][ T7496] ? lock_downgrade+0x6e0/0x6e0 [ 1347.854313][ T7496] __x64_sys_openat+0x13f/0x1f0 [ 1347.859190][ T7496] ? __ia32_sys_open+0x1c0/0x1c0 [ 1347.864236][ T7496] ? syscall_enter_from_user_mode+0x21/0x70 [ 1347.870254][ T7496] do_syscall_64+0x35/0xb0 [ 1347.874690][ T7496] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1347.880605][ T7496] RIP: 0033:0x7efea4c3c004 [ 1347.885031][ T7496] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1347.904831][ T7496] RSP: 002b:00007efea5dd0ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1347.913269][ T7496] RAX: ffffffffffffffda RBX: 00007efea4d9bf60 RCX: 00007efea4c3c004 [ 1347.921254][ T7496] RDX: 0000000000000002 RSI: 00007efea5dd0d40 RDI: 00000000ffffff9c [ 1347.929239][ T7496] RBP: 00007efea5dd0d40 R08: 0000000000000000 R09: 000000000000000e [ 1347.937225][ T7496] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1347.945202][ T7496] R13: 00007ffc6e04f92f R14: 00007efea5dd1300 R15: 0000000000022000 [ 1347.953189][ T7496] [ 1347.965477][ T7500] CPU: 1 PID: 7500 Comm: syz-executor.4 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1347.976013][ T7500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1347.986086][ T7500] Call Trace: [ 1347.989380][ T7500] [ 1347.992312][ T7500] dump_stack_lvl+0xcd/0x134 [ 1347.996929][ T7500] should_fail.cold+0x5/0xa [ 1348.001457][ T7500] should_failslab+0x5/0x10 [ 1348.005989][ T7500] kmem_cache_alloc_node_trace+0x69/0x5b0 [ 1348.011729][ T7500] __kmalloc_node+0x38/0x60 [ 1348.016253][ T7500] kvmalloc_node+0x3e/0x190 [ 1348.020784][ T7500] file_tty_write.constprop.0+0x67b/0x900 [ 1348.026528][ T7500] ? n_tty_check_unthrottle+0x440/0x440 [ 1348.032106][ T7500] ? rcu_read_lock_sched_held+0xd/0x70 [ 1348.037669][ T7500] new_sync_write+0x38a/0x560 [ 1348.042366][ T7500] ? new_sync_read+0x5f0/0x5f0 [ 1348.047152][ T7500] ? inode_security+0x105/0x130 [ 1348.052019][ T7500] ? avc_policy_seqno+0x9/0x70 [ 1348.056796][ T7500] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1348.062541][ T7500] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1348.068802][ T7500] ? security_file_permission+0xab/0xd0 [ 1348.074372][ T7500] vfs_write+0x7c0/0xac0 [ 1348.078639][ T7500] ksys_write+0x127/0x250 [ 1348.082993][ T7500] ? __ia32_sys_read+0xb0/0xb0 [ 1348.087795][ T7500] ? syscall_enter_from_user_mode+0x21/0x70 [ 1348.093977][ T7500] do_syscall_64+0x35/0xb0 [ 1348.098407][ T7500] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1348.104319][ T7500] RIP: 0033:0x7f2d474890e9 [ 1348.108734][ T7500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1348.128341][ T7500] RSP: 002b:00007f2d463fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1348.136753][ T7500] RAX: ffffffffffffffda RBX: 00007f2d4759bf60 RCX: 00007f2d474890e9 [ 1348.144719][ T7500] RDX: 0000000000000060 RSI: 0000000020000380 RDI: 0000000000000003 08:15:04 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (fail_nth: 5) 08:15:04 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x20000}, 0x60) 08:15:04 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x20000}, 0x60) 08:15:04 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x1f000000}, 0x60) 08:15:04 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x7000000}, 0x60) 08:15:04 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) (fail_nth: 2) [ 1348.152683][ T7500] RBP: 00007f2d463fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1348.160648][ T7500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1348.168614][ T7500] R13: 00007ffe1c785dbf R14: 00007f2d463fe300 R15: 0000000000022000 [ 1348.176580][ T7500] 08:15:04 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x60000000}, 0x60) 08:15:04 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x200000}, 0x60) 08:15:04 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x1f000000}, 0x60) 08:15:04 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x200000}, 0x60) 08:15:04 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x1000000}, 0x60) 08:15:04 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x60000000}, 0x60) [ 1348.306817][ T7517] FAULT_INJECTION: forcing a failure. [ 1348.306817][ T7517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1348.338940][ T7522] FAULT_INJECTION: forcing a failure. [ 1348.338940][ T7522] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.366549][ T7517] CPU: 0 PID: 7517 Comm: syz-executor.4 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1348.376998][ T7517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.387070][ T7517] Call Trace: [ 1348.390364][ T7517] [ 1348.393307][ T7517] dump_stack_lvl+0xcd/0x134 [ 1348.397922][ T7517] should_fail.cold+0x5/0xa [ 1348.402450][ T7517] _copy_from_iter+0x389/0x15a0 [ 1348.407335][ T7517] ? __kasan_kmalloc+0xa6/0xd0 [ 1348.412128][ T7517] ? _copy_from_iter_nocache+0x1510/0x1510 [ 1348.417962][ T7517] ? kmem_cache_alloc_node_trace+0x3e5/0x5b0 [ 1348.423972][ T7517] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1348.430235][ T7517] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1348.436505][ T7517] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1348.442770][ T7517] ? __phys_addr_symbol+0x2c/0x70 [ 1348.447822][ T7517] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1348.453563][ T7517] ? __check_object_size+0x16c/0x4f0 [ 1348.458869][ T7517] file_tty_write.constprop.0+0x4cf/0x900 [ 1348.464614][ T7517] ? n_tty_check_unthrottle+0x440/0x440 [ 1348.470190][ T7517] new_sync_write+0x38a/0x560 [ 1348.474901][ T7517] ? new_sync_read+0x5f0/0x5f0 [ 1348.479691][ T7517] ? inode_security+0x105/0x130 [ 1348.484581][ T7517] ? avc_policy_seqno+0x9/0x70 [ 1348.489374][ T7517] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1348.495118][ T7517] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1348.501381][ T7517] ? security_file_permission+0xab/0xd0 [ 1348.506950][ T7517] vfs_write+0x7c0/0xac0 [ 1348.511216][ T7517] ksys_write+0x127/0x250 [ 1348.515571][ T7517] ? __ia32_sys_read+0xb0/0xb0 [ 1348.520360][ T7517] ? syscall_enter_from_user_mode+0x21/0x70 [ 1348.526270][ T7517] do_syscall_64+0x35/0xb0 [ 1348.530711][ T7517] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1348.536627][ T7517] RIP: 0033:0x7f2d474890e9 [ 1348.541056][ T7517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1348.560674][ T7517] RSP: 002b:00007f2d463fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1348.569112][ T7517] RAX: ffffffffffffffda RBX: 00007f2d4759bf60 RCX: 00007f2d474890e9 [ 1348.577105][ T7517] RDX: 0000000000000060 RSI: 0000000020000380 RDI: 0000000000000003 [ 1348.585088][ T7517] RBP: 00007f2d463fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1348.593081][ T7517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1348.601068][ T7517] R13: 00007ffe1c785dbf R14: 00007f2d463fe300 R15: 0000000000022000 [ 1348.609057][ T7517] [ 1348.612087][ T7522] CPU: 1 PID: 7522 Comm: syz-executor.0 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1348.622602][ T7522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.632666][ T7522] Call Trace: [ 1348.635949][ T7522] [ 1348.638878][ T7522] dump_stack_lvl+0xcd/0x134 [ 1348.643476][ T7522] should_fail.cold+0x5/0xa [ 1348.647985][ T7522] should_failslab+0x5/0x10 [ 1348.652491][ T7522] kmem_cache_alloc+0x5d/0x560 [ 1348.657342][ T7522] security_file_alloc+0x34/0x170 [ 1348.662373][ T7522] __alloc_file+0xd9/0x270 [ 1348.666783][ T7522] alloc_empty_file+0x6d/0x170 [ 1348.671539][ T7522] path_openat+0xe4/0x2910 [ 1348.675958][ T7522] ? kmem_cache_alloc+0x265/0x560 [ 1348.680983][ T7522] ? getname_flags.part.0+0x50/0x4f0 [ 1348.686271][ T7522] ? getname+0x8e/0xd0 [ 1348.690337][ T7522] ? do_sys_openat2+0xf5/0x4c0 [ 1348.695104][ T7522] ? __x64_sys_openat+0x13f/0x1f0 [ 1348.700129][ T7522] ? do_syscall_64+0x35/0xb0 [ 1348.704727][ T7522] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1348.710816][ T7522] ? lock_downgrade+0x6e0/0x6e0 [ 1348.715684][ T7522] ? path_lookupat+0x860/0x860 [ 1348.720450][ T7522] ? lock_acquire+0x442/0x510 [ 1348.725130][ T7522] ? lock_release+0x720/0x720 [ 1348.729984][ T7522] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1348.736741][ T7522] ? rcu_read_lock_sched_held+0xd/0x70 [ 1348.742198][ T7522] ? lock_release+0x522/0x720 [ 1348.746879][ T7522] do_filp_open+0x1aa/0x400 [ 1348.751385][ T7522] ? may_open_dev+0xf0/0xf0 [ 1348.755898][ T7522] ? lock_release+0x522/0x720 [ 1348.760661][ T7522] ? alloc_fd+0x2f0/0x670 [ 1348.764991][ T7522] ? lock_downgrade+0x6e0/0x6e0 [ 1348.769840][ T7522] ? rwlock_bug.part.0+0x90/0x90 [ 1348.774863][ T7522] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1348.781104][ T7522] ? _find_next_bit+0x1e3/0x260 [ 1348.785960][ T7522] ? _raw_spin_unlock+0x24/0x40 [ 1348.790811][ T7522] ? alloc_fd+0x2f0/0x670 [ 1348.795142][ T7522] do_sys_openat2+0x16d/0x4c0 [ 1348.799820][ T7522] ? rcu_read_lock_sched_held+0xd/0x70 [ 1348.805280][ T7522] ? lock_acquire+0x442/0x510 [ 1348.809955][ T7522] ? build_open_flags+0x6f0/0x6f0 [ 1348.814990][ T7522] ? lock_downgrade+0x6e0/0x6e0 [ 1348.819847][ T7522] __x64_sys_openat+0x13f/0x1f0 [ 1348.824699][ T7522] ? __ia32_sys_open+0x1c0/0x1c0 [ 1348.829642][ T7522] ? syscall_enter_from_user_mode+0x21/0x70 [ 1348.835632][ T7522] do_syscall_64+0x35/0xb0 [ 1348.840134][ T7522] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1348.846034][ T7522] RIP: 0033:0x7efea4c3c004 [ 1348.850444][ T7522] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1348.870050][ T7522] RSP: 002b:00007efea5dd0ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1348.878465][ T7522] RAX: ffffffffffffffda RBX: 00007efea4d9bf60 RCX: 00007efea4c3c004 [ 1348.886434][ T7522] RDX: 0000000000000002 RSI: 00007efea5dd0d40 RDI: 00000000ffffff9c [ 1348.894406][ T7522] RBP: 00007efea5dd0d40 R08: 0000000000000000 R09: 000000000000000e [ 1348.902373][ T7522] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1348.910335][ T7522] R13: 00007ffc6e04f92f R14: 00007efea5dd1300 R15: 0000000000022000 [ 1348.918310][ T7522] 08:15:05 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (fail_nth: 6) 08:15:05 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x1000000}, 0x60) 08:15:05 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) 08:15:05 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x2000000}, 0x60) 08:15:05 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) (fail_nth: 3) 08:15:05 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) [ 1349.050427][ T7538] FAULT_INJECTION: forcing a failure. [ 1349.050427][ T7538] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.063062][ T7538] CPU: 0 PID: 7538 Comm: syz-executor.4 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1349.073496][ T7538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.083564][ T7538] Call Trace: [ 1349.086858][ T7538] [ 1349.089798][ T7538] dump_stack_lvl+0xcd/0x134 [ 1349.094415][ T7538] should_fail.cold+0x5/0xa [ 1349.098967][ T7538] should_failslab+0x5/0x10 [ 1349.103499][ T7538] __kmalloc+0x7b/0x4d0 [ 1349.107677][ T7538] ? tty_buffer_alloc+0x23f/0x2a0 [ 1349.112740][ T7538] tty_buffer_alloc+0x23f/0x2a0 [ 1349.117620][ T7538] __tty_buffer_request_room+0x156/0x2a0 [ 1349.123282][ T7538] tty_insert_flip_string_fixed_flag+0x8c/0x240 [ 1349.129572][ T7538] pty_write+0x11c/0x1e0 [ 1349.133862][ T7538] n_tty_write+0xa7a/0xfc0 [ 1349.138307][ T7538] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1349.144570][ T7538] ? _copy_from_iter+0x12b/0x15a0 08:15:05 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x3}}}, 0x60) 08:15:05 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x3000000}, 0x60) [ 1349.149633][ T7538] ? n_tty_check_unthrottle+0x440/0x440 [ 1349.155206][ T7538] ? kmem_cache_alloc_node_trace+0x3e5/0x5b0 [ 1349.161215][ T7538] ? __init_waitqueue_head+0xd0/0xd0 [ 1349.166529][ T7538] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1349.172879][ T7538] ? __phys_addr_symbol+0x2c/0x70 [ 1349.177926][ T7538] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1349.183676][ T7538] ? __check_object_size+0x16c/0x4f0 [ 1349.188987][ T7538] file_tty_write.constprop.0+0x520/0x900 [ 1349.194739][ T7538] ? n_tty_check_unthrottle+0x440/0x440 [ 1349.200312][ T7538] new_sync_write+0x38a/0x560 [ 1349.205013][ T7538] ? new_sync_read+0x5f0/0x5f0 [ 1349.209797][ T7538] ? inode_security+0x105/0x130 [ 1349.214670][ T7538] ? avc_policy_seqno+0x9/0x70 [ 1349.219462][ T7538] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1349.225195][ T7538] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1349.231461][ T7538] ? security_file_permission+0xab/0xd0 [ 1349.237028][ T7538] vfs_write+0x7c0/0xac0 [ 1349.241291][ T7538] ksys_write+0x127/0x250 [ 1349.245646][ T7538] ? __ia32_sys_read+0xb0/0xb0 [ 1349.250522][ T7538] ? syscall_enter_from_user_mode+0x21/0x70 [ 1349.256523][ T7538] do_syscall_64+0x35/0xb0 [ 1349.260957][ T7538] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1349.266886][ T7538] RIP: 0033:0x7f2d474890e9 [ 1349.271501][ T7538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1349.291126][ T7538] RSP: 002b:00007f2d463fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 08:15:05 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x3}}}, 0x60) 08:15:05 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x7000000}, 0x60) [ 1349.299560][ T7538] RAX: ffffffffffffffda RBX: 00007f2d4759bf60 RCX: 00007f2d474890e9 [ 1349.307547][ T7538] RDX: 0000000000000060 RSI: 0000000020000380 RDI: 0000000000000003 [ 1349.315532][ T7538] RBP: 00007f2d463fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1349.323518][ T7538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1349.331510][ T7538] R13: 00007ffe1c785dbf R14: 00007f2d463fe300 R15: 0000000000022000 [ 1349.339590][ T7538] 08:15:05 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x2000000}, 0x60) 08:15:05 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x7}}}, 0x60) [ 1349.382359][ T7546] FAULT_INJECTION: forcing a failure. [ 1349.382359][ T7546] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.430680][ T7546] CPU: 0 PID: 7546 Comm: syz-executor.0 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1349.441234][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.451389][ T7546] Call Trace: [ 1349.454681][ T7546] [ 1349.457643][ T7546] dump_stack_lvl+0xcd/0x134 [ 1349.462269][ T7546] should_fail.cold+0x5/0xa [ 1349.466799][ T7546] should_failslab+0x5/0x10 [ 1349.471326][ T7546] __kmalloc+0x7b/0x4d0 [ 1349.475501][ T7546] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1349.480896][ T7546] ? d_absolute_path+0x127/0x1a0 [ 1349.485959][ T7546] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1349.491179][ T7546] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1349.496932][ T7546] tomoyo_encode+0x28/0x50 [ 1349.501378][ T7546] tomoyo_realpath_from_path+0x186/0x620 [ 1349.507032][ T7546] tomoyo_check_open_permission+0x272/0x380 [ 1349.512966][ T7546] ? tomoyo_path_number_perm+0x590/0x590 [ 1349.518718][ T7546] ? avc_has_perm_noaudit+0x1f0/0x390 [ 1349.524112][ T7546] ? path_get+0x5d/0x80 [ 1349.528294][ T7546] ? lock_downgrade+0x6e0/0x6e0 [ 1349.533169][ T7546] ? do_raw_spin_lock+0x120/0x2a0 [ 1349.538229][ T7546] ? rwlock_bug.part.0+0x90/0x90 [ 1349.543194][ T7546] tomoyo_file_open+0x9d/0xc0 [ 1349.547899][ T7546] security_file_open+0x45/0xb0 [ 1349.552775][ T7546] do_dentry_open+0x349/0x11e0 [ 1349.557564][ T7546] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1349.563840][ T7546] ? may_open+0x1f6/0x420 [ 1349.568192][ T7546] path_openat+0x1c71/0x2910 [ 1349.572822][ T7546] ? path_lookupat+0x860/0x860 [ 1349.577610][ T7546] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1349.583873][ T7546] ? _kstrtoull+0x13f/0x1f0 [ 1349.588407][ T7546] ? _parse_integer+0x30/0x30 [ 1349.593113][ T7546] do_filp_open+0x1aa/0x400 [ 1349.597643][ T7546] ? may_open_dev+0xf0/0xf0 [ 1349.602171][ T7546] ? rwlock_bug.part.0+0x90/0x90 [ 1349.607133][ T7546] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1349.613402][ T7546] ? _find_next_bit+0x1e3/0x260 [ 1349.618278][ T7546] ? _raw_spin_unlock+0x24/0x40 [ 1349.623154][ T7546] ? alloc_fd+0x2f0/0x670 [ 1349.627509][ T7546] do_sys_openat2+0x16d/0x4c0 [ 1349.632205][ T7546] ? rcu_read_lock_sched_held+0xd/0x70 [ 1349.637691][ T7546] ? lock_acquire+0x442/0x510 [ 1349.642391][ T7546] ? build_open_flags+0x6f0/0x6f0 [ 1349.647439][ T7546] ? lock_downgrade+0x6e0/0x6e0 [ 1349.652318][ T7546] __x64_sys_openat+0x13f/0x1f0 [ 1349.657189][ T7546] ? __ia32_sys_open+0x1c0/0x1c0 [ 1349.662153][ T7546] ? syscall_enter_from_user_mode+0x21/0x70 [ 1349.668079][ T7546] do_syscall_64+0x35/0xb0 [ 1349.672520][ T7546] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1349.678437][ T7546] RIP: 0033:0x7efea4c3c004 [ 1349.682879][ T7546] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1349.702505][ T7546] RSP: 002b:00007efea5dd0ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1349.710938][ T7546] RAX: ffffffffffffffda RBX: 00007efea4d9bf60 RCX: 00007efea4c3c004 [ 1349.718922][ T7546] RDX: 0000000000000002 RSI: 00007efea5dd0d40 RDI: 00000000ffffff9c [ 1349.726914][ T7546] RBP: 00007efea5dd0d40 R08: 0000000000000000 R09: 000000000000000e [ 1349.735167][ T7546] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1349.743171][ T7546] R13: 00007ffc6e04f92f R14: 00007efea5dd1300 R15: 0000000000022000 [ 1349.751161][ T7546] 08:15:06 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (fail_nth: 7) 08:15:06 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x3000000}, 0x60) 08:15:06 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x60000000}, 0x60) 08:15:06 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x7}}}, 0x60) [ 1349.789455][ T7546] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1349.873517][ T7563] FAULT_INJECTION: forcing a failure. [ 1349.873517][ T7563] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1349.886756][ T7563] CPU: 0 PID: 7563 Comm: syz-executor.0 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1349.897182][ T7563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.907250][ T7563] Call Trace: [ 1349.910535][ T7563] [ 1349.913479][ T7563] dump_stack_lvl+0xcd/0x134 [ 1349.918101][ T7563] should_fail.cold+0x5/0xa [ 1349.922628][ T7563] ? ima_match_policy+0xb98/0x1e50 [ 1349.927771][ T7563] prepare_alloc_pages+0x17b/0x570 [ 1349.932912][ T7563] ? kasan_save_stack+0x2e/0x40 [ 1349.937789][ T7563] ? kasan_save_stack+0x1e/0x40 [ 1349.942762][ T7563] __alloc_pages+0x12f/0x500 [ 1349.947379][ T7563] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 1349.954176][ T7563] ? unwind_next_frame+0xfa9/0x1cc0 [ 1349.959397][ T7563] ? lock_acquire+0x442/0x510 [ 1349.964103][ T7563] ? lock_release+0x720/0x720 [ 1349.968815][ T7563] cache_grow_begin+0x75/0x350 [ 1349.973605][ T7563] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1349.979092][ T7563] ? rcu_read_lock_sched_held+0xd/0x70 [ 1349.984581][ T7563] cache_alloc_refill+0x27f/0x380 [ 1349.989634][ T7563] __kmalloc+0x3b3/0x4d0 [ 1349.993905][ T7563] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1349.999650][ T7563] tomoyo_realpath_from_path+0xc3/0x620 [ 1350.005233][ T7563] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1350.011498][ T7563] tomoyo_check_open_permission+0x272/0x380 [ 1350.017431][ T7563] ? tomoyo_path_number_perm+0x590/0x590 [ 1350.023091][ T7563] ? avc_has_perm_noaudit+0x1f0/0x390 [ 1350.028498][ T7563] ? path_get+0x5d/0x80 [ 1350.032687][ T7563] ? lock_downgrade+0x6e0/0x6e0 [ 1350.037571][ T7563] ? do_raw_spin_lock+0x120/0x2a0 [ 1350.042628][ T7563] ? rwlock_bug.part.0+0x90/0x90 [ 1350.047593][ T7563] tomoyo_file_open+0x9d/0xc0 [ 1350.052379][ T7563] security_file_open+0x45/0xb0 [ 1350.057249][ T7563] do_dentry_open+0x349/0x11e0 [ 1350.062060][ T7563] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1350.068318][ T7563] ? may_open+0x1f6/0x420 [ 1350.072668][ T7563] path_openat+0x1c71/0x2910 [ 1350.077278][ T7563] ? path_lookupat+0x860/0x860 [ 1350.082067][ T7563] ? lock_acquire+0x442/0x510 [ 1350.086767][ T7563] ? lock_release+0x720/0x720 [ 1350.091465][ T7563] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1350.097725][ T7563] ? rcu_read_lock_sched_held+0xd/0x70 [ 1350.103207][ T7563] ? lock_release+0x522/0x720 [ 1350.107908][ T7563] do_filp_open+0x1aa/0x400 [ 1350.112434][ T7563] ? may_open_dev+0xf0/0xf0 [ 1350.116960][ T7563] ? rwlock_bug.part.0+0x90/0x90 [ 1350.121924][ T7563] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1350.128187][ T7563] ? _find_next_bit+0x1e3/0x260 [ 1350.133067][ T7563] ? _raw_spin_unlock+0x24/0x40 [ 1350.137944][ T7563] ? alloc_fd+0x2f0/0x670 [ 1350.142304][ T7563] do_sys_openat2+0x16d/0x4c0 [ 1350.147004][ T7563] ? rcu_read_lock_sched_held+0xd/0x70 [ 1350.152497][ T7563] ? lock_acquire+0x442/0x510 [ 1350.157199][ T7563] ? build_open_flags+0x6f0/0x6f0 [ 1350.162247][ T7563] ? lock_downgrade+0x6e0/0x6e0 [ 1350.167127][ T7563] __x64_sys_openat+0x13f/0x1f0 [ 1350.171998][ T7563] ? __ia32_sys_open+0x1c0/0x1c0 [ 1350.176965][ T7563] ? syscall_enter_from_user_mode+0x21/0x70 [ 1350.182889][ T7563] do_syscall_64+0x35/0xb0 [ 1350.187325][ T7563] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1350.193337][ T7563] RIP: 0033:0x7efea4c3c004 [ 1350.197876][ T7563] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 08:15:06 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) 08:15:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x60}}}, 0x60) 08:15:06 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x60}}}, 0x60) 08:15:06 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) 08:15:06 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x7000000}, 0x60) [ 1350.217503][ T7563] RSP: 002b:00007efea5dd0ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1350.225936][ T7563] RAX: ffffffffffffffda RBX: 00007efea4d9bf60 RCX: 00007efea4c3c004 [ 1350.233924][ T7563] RDX: 0000000000000002 RSI: 00007efea5dd0d40 RDI: 00000000ffffff9c [ 1350.241912][ T7563] RBP: 00007efea5dd0d40 R08: 0000000000000000 R09: 000000000000000e [ 1350.249901][ T7563] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1350.257885][ T7563] R13: 00007ffc6e04f92f R14: 00007efea5dd1300 R15: 0000000000022000 [ 1350.265893][ T7563] 08:15:06 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x60000000}, 0x60) 08:15:06 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x3}}}, 0x60) 08:15:06 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x300}}}, 0x60) 08:15:06 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (fail_nth: 8) 08:15:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x300}}}, 0x60) 08:15:06 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0xfdef}, 0x60) 08:15:06 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x7}}}, 0x60) 08:15:06 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x700}}}, 0x60) 08:15:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x700}}}, 0x60) 08:15:06 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x2}}}, 0x60) 08:15:06 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x1f00}}}, 0x60) [ 1350.428224][ T7585] FAULT_INJECTION: forcing a failure. [ 1350.428224][ T7585] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.489920][ T7585] CPU: 1 PID: 7585 Comm: syz-executor.0 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1350.500366][ T7585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.510440][ T7585] Call Trace: [ 1350.513731][ T7585] [ 1350.516671][ T7585] dump_stack_lvl+0xcd/0x134 [ 1350.521282][ T7585] should_fail.cold+0x5/0xa [ 1350.525807][ T7585] should_failslab+0x5/0x10 [ 1350.530384][ T7585] __kmalloc+0x7b/0x4d0 [ 1350.534563][ T7585] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1350.539963][ T7585] ? d_absolute_path+0x127/0x1a0 [ 1350.544914][ T7585] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1350.550118][ T7585] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1350.555978][ T7585] tomoyo_encode+0x28/0x50 [ 1350.560510][ T7585] tomoyo_realpath_from_path+0x186/0x620 [ 1350.566163][ T7585] tomoyo_check_open_permission+0x272/0x380 [ 1350.572073][ T7585] ? tomoyo_path_number_perm+0x590/0x590 [ 1350.577723][ T7585] ? avc_has_perm_noaudit+0x1f0/0x390 [ 1350.583107][ T7585] ? path_get+0x5d/0x80 [ 1350.587268][ T7585] ? lock_downgrade+0x6e0/0x6e0 [ 1350.592123][ T7585] ? do_raw_spin_lock+0x120/0x2a0 [ 1350.597237][ T7585] ? rwlock_bug.part.0+0x90/0x90 [ 1350.602174][ T7585] tomoyo_file_open+0x9d/0xc0 [ 1350.606854][ T7585] security_file_open+0x45/0xb0 [ 1350.611702][ T7585] do_dentry_open+0x349/0x11e0 [ 1350.616466][ T7585] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1350.622791][ T7585] ? may_open+0x1f6/0x420 [ 1350.627111][ T7585] path_openat+0x1c71/0x2910 [ 1350.631696][ T7585] ? path_lookupat+0x860/0x860 [ 1350.636453][ T7585] ? lock_acquire+0x442/0x510 [ 1350.641214][ T7585] ? lock_release+0x720/0x720 [ 1350.645888][ T7585] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1350.652125][ T7585] ? rcu_read_lock_sched_held+0xd/0x70 [ 1350.657672][ T7585] ? lock_release+0x522/0x720 [ 1350.662346][ T7585] do_filp_open+0x1aa/0x400 [ 1350.666848][ T7585] ? may_open_dev+0xf0/0xf0 [ 1350.671348][ T7585] ? rwlock_bug.part.0+0x90/0x90 [ 1350.676286][ T7585] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1350.682522][ T7585] ? _find_next_bit+0x1e3/0x260 [ 1350.687385][ T7585] ? _raw_spin_unlock+0x24/0x40 [ 1350.692249][ T7585] ? alloc_fd+0x2f0/0x670 [ 1350.696586][ T7585] do_sys_openat2+0x16d/0x4c0 [ 1350.701371][ T7585] ? rcu_read_lock_sched_held+0xd/0x70 [ 1350.706843][ T7585] ? lock_acquire+0x442/0x510 [ 1350.711520][ T7585] ? build_open_flags+0x6f0/0x6f0 [ 1350.716548][ T7585] ? lock_downgrade+0x6e0/0x6e0 [ 1350.721406][ T7585] __x64_sys_openat+0x13f/0x1f0 [ 1350.726259][ T7585] ? __ia32_sys_open+0x1c0/0x1c0 [ 1350.731195][ T7585] ? syscall_enter_from_user_mode+0x21/0x70 [ 1350.737093][ T7585] do_syscall_64+0x35/0xb0 [ 1350.741506][ T7585] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1350.748795][ T7585] RIP: 0033:0x7efea4c3c004 [ 1350.753360][ T7585] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1350.772983][ T7585] RSP: 002b:00007efea5dd0ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1350.781414][ T7585] RAX: ffffffffffffffda RBX: 00007efea4d9bf60 RCX: 00007efea4c3c004 08:15:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x1f00}}}, 0x60) 08:15:06 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0xfffffdef}, 0x60) 08:15:06 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x2000}}}, 0x60) 08:15:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x2000}}}, 0x60) [ 1350.789386][ T7585] RDX: 0000000000000002 RSI: 00007efea5dd0d40 RDI: 00000000ffffff9c [ 1350.797356][ T7585] RBP: 00007efea5dd0d40 R08: 0000000000000000 R09: 000000000000000e [ 1350.805327][ T7585] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1350.813302][ T7585] R13: 00007ffc6e04f92f R14: 00007efea5dd1300 R15: 0000000000022000 [ 1350.821271][ T7585] 08:15:07 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (fail_nth: 9) 08:15:07 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) 08:15:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x60}}}, 0x60) 08:15:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x6000}}}, 0x60) 08:15:07 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x3}}}, 0x60) 08:15:07 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x6000}}}, 0x60) [ 1350.842491][ T7585] ERROR: Out of memory at tomoyo_realpath_from_path. 08:15:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x20000}}}, 0x60) 08:15:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x300}}}, 0x60) 08:15:07 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x2}, 0x60) 08:15:07 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x20000}}}, 0x60) 08:15:07 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x7}}}, 0x60) 08:15:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x200000}}}, 0x60) [ 1350.940105][ T7615] FAULT_INJECTION: forcing a failure. [ 1350.940105][ T7615] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.989451][ T7615] CPU: 0 PID: 7615 Comm: syz-executor.0 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1350.999911][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1351.009976][ T7615] Call Trace: [ 1351.013266][ T7615] [ 1351.016206][ T7615] dump_stack_lvl+0xcd/0x134 [ 1351.020822][ T7615] should_fail.cold+0x5/0xa [ 1351.025355][ T7615] should_failslab+0x5/0x10 [ 1351.029882][ T7615] kmem_cache_alloc_trace+0x5c/0x4a0 [ 1351.035193][ T7615] tty_open+0x13a/0xff0 [ 1351.039376][ T7615] ? chrdev_open+0x114/0x770 [ 1351.043987][ T7615] ? tty_init_dev+0x80/0x80 [ 1351.048513][ T7615] ? rwlock_bug.part.0+0x90/0x90 [ 1351.053483][ T7615] ? tty_init_dev+0x80/0x80 [ 1351.058013][ T7615] chrdev_open+0x266/0x770 [ 1351.062454][ T7615] ? cdev_device_add+0x220/0x220 [ 1351.067420][ T7615] ? fsnotify_perm.part.0+0x221/0x610 [ 1351.072825][ T7615] do_dentry_open+0x4a1/0x11e0 [ 1351.077610][ T7615] ? cdev_device_add+0x220/0x220 [ 1351.082566][ T7615] ? may_open+0x1f6/0x420 [ 1351.086919][ T7615] path_openat+0x1c71/0x2910 [ 1351.091528][ T7615] ? path_lookupat+0x860/0x860 [ 1351.096305][ T7615] ? lock_acquire+0x442/0x510 [ 1351.101100][ T7615] ? lock_release+0x720/0x720 [ 1351.105804][ T7615] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1351.112154][ T7615] ? rcu_read_lock_sched_held+0xd/0x70 [ 1351.117635][ T7615] ? lock_release+0x522/0x720 [ 1351.122513][ T7615] do_filp_open+0x1aa/0x400 [ 1351.127038][ T7615] ? may_open_dev+0xf0/0xf0 [ 1351.131641][ T7615] ? rwlock_bug.part.0+0x90/0x90 [ 1351.136602][ T7615] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1351.142866][ T7615] ? _find_next_bit+0x1e3/0x260 [ 1351.147742][ T7615] ? _raw_spin_unlock+0x24/0x40 [ 1351.152622][ T7615] ? alloc_fd+0x2f0/0x670 [ 1351.156979][ T7615] do_sys_openat2+0x16d/0x4c0 [ 1351.161680][ T7615] ? rcu_read_lock_sched_held+0xd/0x70 [ 1351.167166][ T7615] ? lock_acquire+0x442/0x510 [ 1351.171865][ T7615] ? build_open_flags+0x6f0/0x6f0 [ 1351.176908][ T7615] ? lock_downgrade+0x6e0/0x6e0 [ 1351.181779][ T7615] __x64_sys_openat+0x13f/0x1f0 [ 1351.186652][ T7615] ? __ia32_sys_open+0x1c0/0x1c0 [ 1351.191612][ T7615] ? syscall_enter_from_user_mode+0x21/0x70 [ 1351.197529][ T7615] do_syscall_64+0x35/0xb0 [ 1351.201964][ T7615] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1351.207905][ T7615] RIP: 0033:0x7efea4c3c004 [ 1351.212332][ T7615] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1351.232055][ T7615] RSP: 002b:00007efea5dd0ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1351.240588][ T7615] RAX: ffffffffffffffda RBX: 00007efea4d9bf60 RCX: 00007efea4c3c004 [ 1351.248751][ T7615] RDX: 0000000000000002 RSI: 00007efea5dd0d40 RDI: 00000000ffffff9c [ 1351.256748][ T7615] RBP: 00007efea5dd0d40 R08: 0000000000000000 R09: 000000000000000e [ 1351.264741][ T7615] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1351.272811][ T7615] R13: 00007ffc6e04f92f R14: 00007efea5dd1300 R15: 0000000000022000 [ 1351.280796][ T7615] 08:15:07 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (fail_nth: 10) 08:15:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x1000000}}}, 0x60) 08:15:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x700}}}, 0x60) 08:15:07 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x3}, 0x60) 08:15:07 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x200000}}}, 0x60) 08:15:07 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x60}}}, 0x60) 08:15:07 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x300}}}, 0x60) 08:15:07 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x7}, 0x60) 08:15:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x2000000}}}, 0x60) 08:15:07 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x1000000}}}, 0x60) 08:15:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x2000}}}, 0x60) [ 1351.420659][ T7644] FAULT_INJECTION: forcing a failure. [ 1351.420659][ T7644] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.451257][ T7644] CPU: 0 PID: 7644 Comm: syz-executor.0 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1351.461704][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1351.471767][ T7644] Call Trace: [ 1351.475057][ T7644] [ 1351.478002][ T7644] dump_stack_lvl+0xcd/0x134 [ 1351.482622][ T7644] should_fail.cold+0x5/0xa [ 1351.487200][ T7644] should_failslab+0x5/0x10 [ 1351.491725][ T7644] kmem_cache_alloc_trace+0x5c/0x4a0 [ 1351.497038][ T7644] ? tty_open+0x552/0xff0 [ 1351.501387][ T7644] alloc_tty_struct+0x94/0x920 [ 1351.506172][ T7644] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1351.512431][ T7644] ? do_SAK_work+0x20/0x20 [ 1351.516867][ T7644] ? __kasan_kmalloc+0xa6/0xd0 [ 1351.521669][ T7644] tty_init_dev.part.0+0x20/0x610 [ 1351.526717][ T7644] tty_open+0xb07/0xff0 [ 1351.530898][ T7644] ? tty_init_dev+0x80/0x80 [ 1351.535423][ T7644] ? rwlock_bug.part.0+0x90/0x90 [ 1351.540384][ T7644] ? tty_init_dev+0x80/0x80 [ 1351.544914][ T7644] chrdev_open+0x266/0x770 [ 1351.549350][ T7644] ? cdev_device_add+0x220/0x220 [ 1351.554327][ T7644] ? fsnotify_perm.part.0+0x221/0x610 [ 1351.559725][ T7644] do_dentry_open+0x4a1/0x11e0 [ 1351.564506][ T7644] ? cdev_device_add+0x220/0x220 [ 1351.569469][ T7644] ? may_open+0x1f6/0x420 [ 1351.573813][ T7644] path_openat+0x1c71/0x2910 [ 1351.578419][ T7644] ? lock_downgrade+0x690/0x6e0 [ 1351.583286][ T7644] ? path_lookupat+0x860/0x860 [ 1351.588067][ T7644] ? lock_acquire+0x442/0x510 [ 1351.592765][ T7644] ? lock_release+0x720/0x720 [ 1351.597460][ T7644] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1351.603720][ T7644] ? rcu_read_lock_sched_held+0xd/0x70 [ 1351.609201][ T7644] ? lock_release+0x522/0x720 [ 1351.613976][ T7644] do_filp_open+0x1aa/0x400 [ 1351.618553][ T7644] ? may_open_dev+0xf0/0xf0 [ 1351.623071][ T7644] ? rwlock_bug.part.0+0x90/0x90 [ 1351.628029][ T7644] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1351.634286][ T7644] ? _find_next_bit+0x1e3/0x260 [ 1351.639157][ T7644] ? _raw_spin_unlock+0x24/0x40 [ 1351.644033][ T7644] ? alloc_fd+0x2f0/0x670 [ 1351.648491][ T7644] do_sys_openat2+0x16d/0x4c0 [ 1351.653183][ T7644] ? rcu_read_lock_sched_held+0xd/0x70 [ 1351.658658][ T7644] ? lock_acquire+0x442/0x510 [ 1351.663351][ T7644] ? build_open_flags+0x6f0/0x6f0 [ 1351.668407][ T7644] ? lock_downgrade+0x6e0/0x6e0 [ 1351.673275][ T7644] __x64_sys_openat+0x13f/0x1f0 [ 1351.678147][ T7644] ? __ia32_sys_open+0x1c0/0x1c0 [ 1351.683105][ T7644] ? syscall_enter_from_user_mode+0x21/0x70 [ 1351.689277][ T7644] do_syscall_64+0x35/0xb0 [ 1351.693705][ T7644] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1351.699622][ T7644] RIP: 0033:0x7efea4c3c004 [ 1351.704040][ T7644] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1351.723666][ T7644] RSP: 002b:00007efea5dd0ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1351.732091][ T7644] RAX: ffffffffffffffda RBX: 00007efea4d9bf60 RCX: 00007efea4c3c004 [ 1351.740075][ T7644] RDX: 0000000000000002 RSI: 00007efea5dd0d40 RDI: 00000000ffffff9c [ 1351.748062][ T7644] RBP: 00007efea5dd0d40 R08: 0000000000000000 R09: 000000000000000e [ 1351.756220][ T7644] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1351.764203][ T7644] R13: 00007ffc6e04f92f R14: 00007efea5dd1300 R15: 0000000000022000 08:15:07 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x700}}}, 0x60) [ 1351.772197][ T7644] 08:15:08 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (fail_nth: 11) 08:15:08 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x60}, 0x60) 08:15:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x3000000}}}, 0x60) 08:15:08 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x6000}}}, 0x60) 08:15:08 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x2000}}}, 0x60) 08:15:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x2000000}}}, 0x60) 08:15:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x7000000}}}, 0x60) [ 1351.892816][ T7660] FAULT_INJECTION: forcing a failure. [ 1351.892816][ T7660] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.918666][ T7660] CPU: 1 PID: 7660 Comm: syz-executor.0 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1351.929126][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1351.939197][ T7660] Call Trace: [ 1351.942482][ T7660] [ 1351.945420][ T7660] dump_stack_lvl+0xcd/0x134 [ 1351.950042][ T7660] should_fail.cold+0x5/0xa [ 1351.954566][ T7660] should_failslab+0x5/0x10 [ 1351.959095][ T7660] kmem_cache_alloc_trace+0x5c/0x4a0 [ 1351.964409][ T7660] ? alloc_tty_struct+0x743/0x920 [ 1351.969456][ T7660] pty_common_install+0xd4/0xa70 [ 1351.974416][ T7660] ? pty_common_install+0xa70/0xa70 [ 1351.979635][ T7660] tty_init_dev.part.0+0x9e/0x610 [ 1351.984682][ T7660] tty_open+0xb07/0xff0 [ 1351.988859][ T7660] ? tty_init_dev+0x80/0x80 [ 1351.993390][ T7660] ? rwlock_bug.part.0+0x90/0x90 [ 1351.998351][ T7660] ? tty_init_dev+0x80/0x80 [ 1352.002875][ T7660] chrdev_open+0x266/0x770 [ 1352.007308][ T7660] ? cdev_device_add+0x220/0x220 [ 1352.012263][ T7660] ? fsnotify_perm.part.0+0x221/0x610 [ 1352.017658][ T7660] do_dentry_open+0x4a1/0x11e0 [ 1352.022441][ T7660] ? cdev_device_add+0x220/0x220 [ 1352.027394][ T7660] ? may_open+0x1f6/0x420 [ 1352.031732][ T7660] path_openat+0x1c71/0x2910 [ 1352.036341][ T7660] ? path_lookupat+0x860/0x860 [ 1352.041116][ T7660] ? lock_acquire+0x442/0x510 [ 1352.045814][ T7660] ? lock_release+0x720/0x720 [ 1352.050505][ T7660] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1352.056758][ T7660] ? rcu_read_lock_sched_held+0xd/0x70 [ 1352.062237][ T7660] ? lock_release+0x522/0x720 [ 1352.066935][ T7660] do_filp_open+0x1aa/0x400 [ 1352.071455][ T7660] ? may_open_dev+0xf0/0xf0 [ 1352.075977][ T7660] ? rwlock_bug.part.0+0x90/0x90 [ 1352.080935][ T7660] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1352.087192][ T7660] ? _find_next_bit+0x1e3/0x260 [ 1352.092062][ T7660] ? _raw_spin_unlock+0x24/0x40 [ 1352.096929][ T7660] ? alloc_fd+0x2f0/0x670 [ 1352.101285][ T7660] do_sys_openat2+0x16d/0x4c0 [ 1352.105979][ T7660] ? rcu_read_lock_sched_held+0xd/0x70 [ 1352.111463][ T7660] ? lock_acquire+0x442/0x510 [ 1352.116157][ T7660] ? build_open_flags+0x6f0/0x6f0 [ 1352.121199][ T7660] ? lock_downgrade+0x6e0/0x6e0 [ 1352.126069][ T7660] __x64_sys_openat+0x13f/0x1f0 [ 1352.130936][ T7660] ? __ia32_sys_open+0x1c0/0x1c0 [ 1352.135891][ T7660] ? syscall_enter_from_user_mode+0x21/0x70 [ 1352.141797][ T7660] do_syscall_64+0x35/0xb0 [ 1352.146235][ T7660] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1352.152150][ T7660] RIP: 0033:0x7efea4c3c004 [ 1352.156571][ T7660] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1352.176191][ T7660] RSP: 002b:00007efea5dd0ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1352.184617][ T7660] RAX: ffffffffffffffda RBX: 00007efea4d9bf60 RCX: 00007efea4c3c004 08:15:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x1f000000}}}, 0x60) [ 1352.192600][ T7660] RDX: 0000000000000002 RSI: 00007efea5dd0d40 RDI: 00000000ffffff9c [ 1352.200590][ T7660] RBP: 00007efea5dd0d40 R08: 0000000000000000 R09: 000000000000000e [ 1352.208573][ T7660] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1352.216557][ T7660] R13: 00007ffc6e04f92f R14: 00007efea5dd1300 R15: 0000000000022000 [ 1352.224549][ T7660] 08:15:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x3000000}}}, 0x60) 08:15:08 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x300}, 0x60) 08:15:08 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x6000}}}, 0x60) 08:15:08 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x20000}}}, 0x60) 08:15:08 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (fail_nth: 12) 08:15:08 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x20000}}}, 0x60) 08:15:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x7000000}}}, 0x60) 08:15:08 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x700}, 0x60) 08:15:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x60000000}}}, 0x60) 08:15:08 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x200000}}}, 0x60) [ 1352.393552][ T7686] FAULT_INJECTION: forcing a failure. [ 1352.393552][ T7686] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.434385][ T7686] CPU: 0 PID: 7686 Comm: syz-executor.0 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1352.444838][ T7686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1352.454904][ T7686] Call Trace: [ 1352.458189][ T7686] [ 1352.461114][ T7686] dump_stack_lvl+0xcd/0x134 [ 1352.465715][ T7686] should_fail.cold+0x5/0xa [ 1352.470220][ T7686] should_failslab+0x5/0x10 [ 1352.474741][ T7686] kmem_cache_alloc_trace+0x5c/0x4a0 [ 1352.480040][ T7686] ? alloc_tty_struct+0x743/0x920 [ 1352.485077][ T7686] pty_common_install+0x101/0xa70 [ 1352.490111][ T7686] ? pty_common_install+0xa70/0xa70 [ 1352.495316][ T7686] tty_init_dev.part.0+0x9e/0x610 [ 1352.500348][ T7686] tty_open+0xb07/0xff0 [ 1352.504506][ T7686] ? tty_init_dev+0x80/0x80 [ 1352.509006][ T7686] ? rwlock_bug.part.0+0x90/0x90 [ 1352.513946][ T7686] ? tty_init_dev+0x80/0x80 [ 1352.518445][ T7686] chrdev_open+0x266/0x770 [ 1352.522858][ T7686] ? cdev_device_add+0x220/0x220 [ 1352.527799][ T7686] ? fsnotify_perm.part.0+0x221/0x610 [ 1352.533264][ T7686] do_dentry_open+0x4a1/0x11e0 [ 1352.538026][ T7686] ? cdev_device_add+0x220/0x220 [ 1352.542970][ T7686] ? may_open+0x1f6/0x420 [ 1352.547307][ T7686] path_openat+0x1c71/0x2910 [ 1352.551908][ T7686] ? path_lookupat+0x860/0x860 [ 1352.556673][ T7686] ? lock_acquire+0x442/0x510 [ 1352.561355][ T7686] ? lock_release+0x720/0x720 [ 1352.566034][ T7686] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1352.572269][ T7686] ? rcu_read_lock_sched_held+0xd/0x70 [ 1352.577723][ T7686] ? lock_release+0x522/0x720 [ 1352.582397][ T7686] do_filp_open+0x1aa/0x400 [ 1352.586893][ T7686] ? may_open_dev+0xf0/0xf0 [ 1352.591393][ T7686] ? rwlock_bug.part.0+0x90/0x90 [ 1352.596330][ T7686] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1352.602567][ T7686] ? _find_next_bit+0x1e3/0x260 [ 1352.607416][ T7686] ? _raw_spin_unlock+0x24/0x40 [ 1352.612260][ T7686] ? alloc_fd+0x2f0/0x670 [ 1352.616585][ T7686] do_sys_openat2+0x16d/0x4c0 [ 1352.621262][ T7686] ? rcu_read_lock_sched_held+0xd/0x70 [ 1352.626717][ T7686] ? lock_acquire+0x442/0x510 [ 1352.631391][ T7686] ? build_open_flags+0x6f0/0x6f0 [ 1352.636410][ T7686] ? lock_downgrade+0x6e0/0x6e0 [ 1352.641255][ T7686] __x64_sys_openat+0x13f/0x1f0 [ 1352.646105][ T7686] ? __ia32_sys_open+0x1c0/0x1c0 [ 1352.651044][ T7686] ? syscall_enter_from_user_mode+0x21/0x70 [ 1352.656935][ T7686] do_syscall_64+0x35/0xb0 [ 1352.661359][ T7686] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1352.667250][ T7686] RIP: 0033:0x7efea4c3c004 [ 1352.671653][ T7686] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1352.691251][ T7686] RSP: 002b:00007efea5dd0ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1352.699656][ T7686] RAX: ffffffffffffffda RBX: 00007efea4d9bf60 RCX: 00007efea4c3c004 [ 1352.707619][ T7686] RDX: 0000000000000002 RSI: 00007efea5dd0d40 RDI: 00000000ffffff9c [ 1352.715583][ T7686] RBP: 00007efea5dd0d40 R08: 0000000000000000 R09: 000000000000000e [ 1352.723547][ T7686] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 08:15:08 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x2000}, 0x60) [ 1352.731508][ T7686] R13: 00007ffc6e04f92f R14: 00007efea5dd1300 R15: 0000000000022000 [ 1352.739484][ T7686] 08:15:08 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x1000000}}}, 0x60) 08:15:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x1f000000}}}, 0x60) 08:15:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x2000000000000}}}, 0x60) 08:15:09 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (fail_nth: 13) 08:15:09 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x200000}}}, 0x60) 08:15:09 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x6000}, 0x60) 08:15:09 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x2000000}}}, 0x60) 08:15:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x60000000}}}, 0x60) 08:15:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x20000000000000}}}, 0x60) [ 1352.889146][ T7712] FAULT_INJECTION: forcing a failure. [ 1352.889146][ T7712] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.954991][ T7712] CPU: 1 PID: 7712 Comm: syz-executor.0 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1352.965444][ T7712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1352.975514][ T7712] Call Trace: [ 1352.978800][ T7712] [ 1352.981738][ T7712] dump_stack_lvl+0xcd/0x134 [ 1352.986356][ T7712] should_fail.cold+0x5/0xa [ 1352.990893][ T7712] should_failslab+0x5/0x10 [ 1352.995419][ T7712] kmem_cache_alloc_trace+0x5c/0x4a0 [ 1353.000738][ T7712] alloc_tty_struct+0x94/0x920 [ 1353.005528][ T7712] ? do_SAK_work+0x20/0x20 [ 1353.009967][ T7712] ? rcu_read_lock_sched_held+0xd/0x70 [ 1353.015446][ T7712] ? trace_kmalloc+0x32/0xf0 [ 1353.020054][ T7712] ? kmem_cache_alloc_trace+0x203/0x4a0 [ 1353.025627][ T7712] ? alloc_tty_struct+0x743/0x920 [ 1353.030675][ T7712] pty_common_install+0x1ab/0xa70 [ 1353.035723][ T7712] ? pty_common_install+0xa70/0xa70 [ 1353.040943][ T7712] tty_init_dev.part.0+0x9e/0x610 [ 1353.045988][ T7712] tty_open+0xb07/0xff0 [ 1353.050168][ T7712] ? tty_init_dev+0x80/0x80 [ 1353.054695][ T7712] ? rwlock_bug.part.0+0x90/0x90 [ 1353.059658][ T7712] ? tty_init_dev+0x80/0x80 [ 1353.064297][ T7712] chrdev_open+0x266/0x770 [ 1353.068837][ T7712] ? cdev_device_add+0x220/0x220 [ 1353.073798][ T7712] ? fsnotify_perm.part.0+0x221/0x610 [ 1353.079203][ T7712] do_dentry_open+0x4a1/0x11e0 [ 1353.083988][ T7712] ? cdev_device_add+0x220/0x220 [ 1353.088949][ T7712] ? may_open+0x1f6/0x420 [ 1353.093291][ T7712] path_openat+0x1c71/0x2910 [ 1353.097898][ T7712] ? path_lookupat+0x860/0x860 [ 1353.102687][ T7712] ? lock_acquire+0x442/0x510 [ 1353.107388][ T7712] ? lock_release+0x720/0x720 [ 1353.112094][ T7712] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1353.118352][ T7712] ? rcu_read_lock_sched_held+0xd/0x70 [ 1353.123838][ T7712] ? lock_release+0x522/0x720 [ 1353.128533][ T7712] do_filp_open+0x1aa/0x400 [ 1353.133060][ T7712] ? may_open_dev+0xf0/0xf0 [ 1353.137584][ T7712] ? rwlock_bug.part.0+0x90/0x90 [ 1353.142544][ T7712] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1353.148805][ T7712] ? _find_next_bit+0x1e3/0x260 [ 1353.153678][ T7712] ? _raw_spin_unlock+0x24/0x40 [ 1353.158547][ T7712] ? alloc_fd+0x2f0/0x670 [ 1353.162901][ T7712] do_sys_openat2+0x16d/0x4c0 [ 1353.167596][ T7712] ? rcu_read_lock_sched_held+0xd/0x70 [ 1353.173076][ T7712] ? lock_acquire+0x442/0x510 [ 1353.177780][ T7712] ? build_open_flags+0x6f0/0x6f0 [ 1353.182824][ T7712] ? lock_downgrade+0x6e0/0x6e0 [ 1353.187694][ T7712] __x64_sys_openat+0x13f/0x1f0 [ 1353.192565][ T7712] ? __ia32_sys_open+0x1c0/0x1c0 [ 1353.197519][ T7712] ? syscall_enter_from_user_mode+0x21/0x70 [ 1353.203434][ T7712] do_syscall_64+0x35/0xb0 [ 1353.207866][ T7712] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1353.213783][ T7712] RIP: 0033:0x7efea4c3c004 [ 1353.218210][ T7712] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1353.237829][ T7712] RSP: 002b:00007efea5dd0ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1353.246254][ T7712] RAX: ffffffffffffffda RBX: 00007efea4d9bf60 RCX: 00007efea4c3c004 08:15:09 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x20000}, 0x60) 08:15:09 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x1000000}}}, 0x60) [ 1353.254252][ T7712] RDX: 0000000000000002 RSI: 00007efea5dd0d40 RDI: 00000000ffffff9c [ 1353.262412][ T7712] RBP: 00007efea5dd0d40 R08: 0000000000000000 R09: 000000000000000e [ 1353.270393][ T7712] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1353.278378][ T7712] R13: 00007ffc6e04f92f R14: 00007efea5dd1300 R15: 0000000000022000 [ 1353.286360][ T7712] 08:15:09 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x3000000}}}, 0x60) 08:15:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x100000000000000}}}, 0x60) 08:15:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x2000000000000}}}, 0x60) 08:15:09 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (fail_nth: 14) 08:15:09 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x200000}, 0x60) 08:15:09 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x7000000}}}, 0x60) 08:15:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x200000000000000}}}, 0x60) 08:15:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x20000000000000}}}, 0x60) 08:15:09 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x2000000}}}, 0x60) [ 1353.465964][ T7738] FAULT_INJECTION: forcing a failure. [ 1353.465964][ T7738] name failslab, interval 1, probability 0, space 0, times 0 [ 1353.516489][ T7738] CPU: 1 PID: 7738 Comm: syz-executor.0 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1353.526939][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1353.537008][ T7738] Call Trace: [ 1353.540297][ T7738] [ 1353.543243][ T7738] dump_stack_lvl+0xcd/0x134 [ 1353.547860][ T7738] should_fail.cold+0x5/0xa [ 1353.552387][ T7738] should_failslab+0x5/0x10 [ 1353.556918][ T7738] kmem_cache_alloc_node_trace+0x69/0x5b0 [ 1353.567696][ T7738] ? _raw_spin_unlock+0x24/0x40 [ 1353.572570][ T7738] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1353.578834][ T7738] __kmalloc_node+0x38/0x60 [ 1353.583380][ T7738] __vmalloc_node_range+0xa40/0x13e0 [ 1353.588688][ T7738] ? rwlock_bug.part.0+0x90/0x90 [ 1353.593650][ T7738] ? n_tty_open+0x16/0x170 [ 1353.598091][ T7738] ? __ldsem_down_write_nested+0xe8/0x850 [ 1353.603926][ T7738] ? vfree_atomic+0xe0/0xe0 [ 1353.608444][ T7738] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1353.614283][ T7738] ? __ldsem_down_read_nested+0x850/0x850 [ 1353.620113][ T7738] ? __wake_up_common+0x650/0x650 [ 1353.625158][ T7738] ? n_tty_open+0x16/0x170 [ 1353.629598][ T7738] vzalloc+0x67/0x80 [ 1353.633512][ T7738] ? n_tty_open+0x16/0x170 [ 1353.637946][ T7738] n_tty_open+0x16/0x170 [ 1353.642209][ T7738] ? n_tty_set_termios+0x1010/0x1010 [ 1353.647511][ T7738] tty_ldisc_open+0x9b/0x110 [ 1353.652124][ T7738] tty_ldisc_setup+0x43/0x100 [ 1353.656822][ T7738] tty_init_dev.part.0+0x1f4/0x610 [ 1353.661953][ T7738] tty_open+0xb07/0xff0 [ 1353.666129][ T7738] ? tty_init_dev+0x80/0x80 [ 1353.670654][ T7738] ? rwlock_bug.part.0+0x90/0x90 [ 1353.675613][ T7738] ? tty_init_dev+0x80/0x80 [ 1353.680135][ T7738] chrdev_open+0x266/0x770 [ 1353.684568][ T7738] ? cdev_device_add+0x220/0x220 [ 1353.689535][ T7738] ? fsnotify_perm.part.0+0x221/0x610 [ 1353.694933][ T7738] do_dentry_open+0x4a1/0x11e0 [ 1353.699721][ T7738] ? cdev_device_add+0x220/0x220 [ 1353.704683][ T7738] ? may_open+0x1f6/0x420 [ 1353.709027][ T7738] path_openat+0x1c71/0x2910 [ 1353.713630][ T7738] ? path_lookupat+0x860/0x860 [ 1353.718405][ T7738] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1353.724662][ T7738] ? _kstrtoull+0x13f/0x1f0 [ 1353.729179][ T7738] ? _parse_integer+0x30/0x30 [ 1353.733893][ T7738] do_filp_open+0x1aa/0x400 [ 1353.738410][ T7738] ? may_open_dev+0xf0/0xf0 [ 1353.742927][ T7738] ? rwlock_bug.part.0+0x90/0x90 [ 1353.747882][ T7738] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1353.754133][ T7738] ? _find_next_bit+0x1e3/0x260 [ 1353.759000][ T7738] ? _raw_spin_unlock+0x24/0x40 [ 1353.763865][ T7738] ? alloc_fd+0x2f0/0x670 [ 1353.768206][ T7738] do_sys_openat2+0x16d/0x4c0 [ 1353.772906][ T7738] ? rcu_read_lock_sched_held+0xd/0x70 [ 1353.778389][ T7738] ? lock_acquire+0x442/0x510 [ 1353.783084][ T7738] ? build_open_flags+0x6f0/0x6f0 [ 1353.788126][ T7738] ? lock_downgrade+0x6e0/0x6e0 [ 1353.793022][ T7738] __x64_sys_openat+0x13f/0x1f0 [ 1353.797892][ T7738] ? __ia32_sys_open+0x1c0/0x1c0 [ 1353.802842][ T7738] ? syscall_enter_from_user_mode+0x21/0x70 [ 1353.808757][ T7738] do_syscall_64+0x35/0xb0 [ 1353.813185][ T7738] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1353.819105][ T7738] RIP: 0033:0x7efea4c3c004 [ 1353.823532][ T7738] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1353.843164][ T7738] RSP: 002b:00007efea5dd0ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1353.851606][ T7738] RAX: ffffffffffffffda RBX: 00007efea4d9bf60 RCX: 00007efea4c3c004 [ 1353.859582][ T7738] RDX: 0000000000000002 RSI: 00007efea5dd0d40 RDI: 00000000ffffff9c [ 1353.867571][ T7738] RBP: 00007efea5dd0d40 R08: 0000000000000000 R09: 000000000000000e [ 1353.875555][ T7738] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1353.883536][ T7738] R13: 00007ffc6e04f92f R14: 00007efea5dd1300 R15: 0000000000022000 [ 1353.891525][ T7738] 08:15:10 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x1000000}, 0x60) [ 1353.915060][ T7738] pty pty20: ldisc open failed (-12), clearing slot 20 08:15:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x300000000000000}}}, 0x60) 08:15:10 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x100000000000000}}}, 0x60) 08:15:10 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x60000000}}}, 0x60) 08:15:10 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x3000000}}}, 0x60) 08:15:10 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (fail_nth: 15) 08:15:10 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x7000000}}}, 0x60) 08:15:10 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x2000000}, 0x60) 08:15:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x700000000000000}}}, 0x60) [ 1354.071112][ T7763] FAULT_INJECTION: forcing a failure. [ 1354.071112][ T7763] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.094494][ T7763] CPU: 0 PID: 7763 Comm: syz-executor.0 Not tainted 5.18.0-rc7-syzkaller-00119-gb015dcd62b86 #0 [ 1354.104948][ T7763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1354.115033][ T7763] Call Trace: [ 1354.118318][ T7763] 08:15:10 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x2000000000000}}}, 0x60) [ 1354.121257][ T7763] dump_stack_lvl+0xcd/0x134 [ 1354.125877][ T7763] should_fail.cold+0x5/0xa [ 1354.130402][ T7763] should_failslab+0x5/0x10 [ 1354.134932][ T7763] kmem_cache_alloc_node+0x68/0x590 [ 1354.140155][ T7763] alloc_vmap_area+0x16f/0x1f00 [ 1354.145023][ T7763] ? kmem_cache_alloc_node_trace+0x4f/0x5b0 [ 1354.150940][ T7763] ? lock_downgrade+0x6e0/0x6e0 [ 1354.155811][ T7763] ? free_vmap_area+0x1ac0/0x1ac0 [ 1354.160861][ T7763] ? rcu_read_lock_sched_held+0xd/0x70 [ 1354.166342][ T7763] ? kmem_cache_alloc_node_trace+0x3e5/0x5b0 [ 1354.172339][ T7763] ? lock_acquire+0x442/0x510 [ 1354.177021][ T7763] __get_vm_area_node+0x142/0x3f0 [ 1354.182044][ T7763] __vmalloc_node_range+0x250/0x13e0 [ 1354.187324][ T7763] ? n_tty_open+0x16/0x170 [ 1354.191764][ T7763] ? lock_acquire+0x442/0x510 [ 1354.196442][ T7763] ? lock_release+0x522/0x720 [ 1354.201117][ T7763] ? rwlock_bug.part.0+0x90/0x90 [ 1354.206103][ T7763] ? n_tty_open+0x16/0x170 [ 1354.210527][ T7763] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1354.216768][ T7763] ? __ldsem_down_write_nested+0xe8/0x850 [ 1354.222489][ T7763] ? __ldsem_down_write_nested+0xfa/0x850 [ 1354.228208][ T7763] ? vfree_atomic+0xe0/0xe0 [ 1354.232711][ T7763] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1354.238525][ T7763] ? __ldsem_down_read_nested+0x850/0x850 [ 1354.244244][ T7763] ? __wake_up_common+0x650/0x650 [ 1354.249361][ T7763] ? n_tty_open+0x16/0x170 [ 1354.253778][ T7763] vzalloc+0x67/0x80 [ 1354.257674][ T7763] ? n_tty_open+0x16/0x170 [ 1354.262098][ T7763] n_tty_open+0x16/0x170 [ 1354.266347][ T7763] ? n_tty_set_termios+0x1010/0x1010 [ 1354.271635][ T7763] tty_ldisc_open+0x9b/0x110 [ 1354.276230][ T7763] tty_ldisc_setup+0x43/0x100 [ 1354.280910][ T7763] tty_init_dev.part.0+0x1f4/0x610 [ 1354.286029][ T7763] tty_open+0xb07/0xff0 [ 1354.290214][ T7763] ? tty_init_dev+0x80/0x80 [ 1354.294720][ T7763] ? rwlock_bug.part.0+0x90/0x90 [ 1354.299667][ T7763] ? tty_init_dev+0x80/0x80 [ 1354.304177][ T7763] chrdev_open+0x266/0x770 [ 1354.308593][ T7763] ? cdev_device_add+0x220/0x220 [ 1354.313539][ T7763] ? fsnotify_perm.part.0+0x221/0x610 [ 1354.319011][ T7763] do_dentry_open+0x4a1/0x11e0 [ 1354.323776][ T7763] ? cdev_device_add+0x220/0x220 [ 1354.328713][ T7763] ? may_open+0x1f6/0x420 [ 1354.333044][ T7763] path_openat+0x1c71/0x2910 [ 1354.337636][ T7763] ? path_lookupat+0x860/0x860 [ 1354.342426][ T7763] ? lock_acquire+0x442/0x510 [ 1354.347107][ T7763] ? lock_release+0x720/0x720 [ 1354.351958][ T7763] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1354.358197][ T7763] ? rcu_read_lock_sched_held+0xd/0x70 [ 1354.363658][ T7763] ? lock_release+0x522/0x720 [ 1354.368336][ T7763] do_filp_open+0x1aa/0x400 [ 1354.372835][ T7763] ? may_open_dev+0xf0/0xf0 [ 1354.377338][ T7763] ? rwlock_bug.part.0+0x90/0x90 [ 1354.382276][ T7763] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1354.388584][ T7763] ? _find_next_bit+0x1e3/0x260 [ 1354.393439][ T7763] ? _raw_spin_unlock+0x24/0x40 [ 1354.398380][ T7763] ? alloc_fd+0x2f0/0x670 [ 1354.402739][ T7763] do_sys_openat2+0x16d/0x4c0 [ 1354.407431][ T7763] ? rcu_read_lock_sched_held+0xd/0x70 [ 1354.413010][ T7763] ? lock_acquire+0x442/0x510 [ 1354.417689][ T7763] ? build_open_flags+0x6f0/0x6f0 [ 1354.422723][ T7763] ? lock_downgrade+0x6e0/0x6e0 [ 1354.427577][ T7763] __x64_sys_openat+0x13f/0x1f0 [ 1354.432516][ T7763] ? __ia32_sys_open+0x1c0/0x1c0 [ 1354.437636][ T7763] ? syscall_enter_from_user_mode+0x21/0x70 [ 1354.443530][ T7763] do_syscall_64+0x35/0xb0 [ 1354.447945][ T7763] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1354.453841][ T7763] RIP: 0033:0x7efea4c3c004