7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) 14:21:35 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:35 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:35 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:35 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x0, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:35 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:35 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x0, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:35 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x0, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:35 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:35 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:36 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:36 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:36 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) 14:21:36 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:36 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:36 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:36 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:36 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:36 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:36 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:36 executing program 2: syz_open_dev$dri(&(0x7f00000020c0), 0x0, 0x101000) 14:21:36 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:36 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:36 executing program 2: syz_open_dev$dri(&(0x7f00000020c0), 0x0, 0x101000) 14:21:36 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:36 executing program 5: syz_open_dev$usbfs(&(0x7f0000002240), 0x0, 0x0) 14:21:36 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:36 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:36 executing program 2: syz_open_dev$dri(&(0x7f00000020c0), 0x0, 0x101000) 14:21:36 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:37 executing program 2: syz_open_dev$dri(0x0, 0x0, 0x101000) 14:21:37 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:37 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:37 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:37 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:37 executing program 2: syz_open_dev$dri(0x0, 0x0, 0x101000) 14:21:37 executing program 2: syz_open_dev$dri(0x0, 0x0, 0x101000) 14:21:37 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:37 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:37 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x1, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) [ 383.927793][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.940485][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 14:21:37 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:37 executing program 2: syz_open_dev$dri(&(0x7f00000020c0), 0x0, 0x0) 14:21:37 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:37 executing program 2: syz_open_dev$dri(&(0x7f00000020c0), 0x0, 0x0) 14:21:37 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:37 executing program 2: syz_open_dev$dri(&(0x7f00000020c0), 0x0, 0x0) 14:21:37 executing program 5: syz_open_dev$dri(&(0x7f00000020c0), 0x0, 0x0) 14:21:38 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x1, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:38 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:38 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:38 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:38 executing program 5: syz_open_dev$dri(&(0x7f00000020c0), 0x0, 0x0) 14:21:38 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:38 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x1, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:38 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) 14:21:38 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:38 executing program 5: syz_open_dev$dri(&(0x7f00000020c0), 0x0, 0x0) 14:21:38 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:38 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:38 executing program 5: syz_open_dev$dri(0x0, 0x0, 0x0) 14:21:38 executing program 5: syz_open_dev$dri(0x0, 0x0, 0x0) 14:21:38 executing program 5: syz_open_dev$dri(0x0, 0x0, 0x0) 14:21:38 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:38 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:38 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x0, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:39 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:39 executing program 2: syz_open_dev$usbfs(&(0x7f0000002240), 0x0, 0x20000) 14:21:39 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x1, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:39 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:39 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x0, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:39 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x0, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:39 executing program 1: syz_open_dev$usbfs(0x0, 0x8000000000000000, 0x20000) 14:21:39 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) 14:21:39 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:39 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x0, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:39 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x0, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:39 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x1, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:39 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x0, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:39 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x1, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:39 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x0, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:39 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) 14:21:40 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x0, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:40 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x0, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:40 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x1, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:40 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x0, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:40 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:40 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) 14:21:40 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x0, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:40 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x0, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:40 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:40 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x0, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:40 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:40 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x0, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:40 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x0, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:40 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x0, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:41 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x0, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:41 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x0, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:41 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:41 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) 14:21:41 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:41 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x0, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:41 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x0, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:41 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x0, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:41 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:41 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:41 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x0, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:41 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x0, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:41 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x0, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:41 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x0, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:41 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:41 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x0, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:41 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:42 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:42 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x0, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:42 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x0, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:42 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:42 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:42 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x0, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:42 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:42 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:42 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x0, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:42 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x0, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:42 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x0, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:42 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:42 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:42 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) 14:21:42 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x0, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:42 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001ac0)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:42 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:42 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x0, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:43 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x0, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:43 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:43 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) 14:21:43 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x1, 0x0, &(0x7f0000001240)=[{0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:43 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:43 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) 14:21:43 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:43 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x1, 0x0, &(0x7f0000001240)=[{0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:43 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:43 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:43 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x0, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:43 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:43 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:43 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x1, 0x0, &(0x7f0000001240)=[{0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:43 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:43 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:43 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:43 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:44 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:44 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x0, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:44 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:44 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) 14:21:44 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) 14:21:44 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:44 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x0, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:44 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:44 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:44 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x1, 0x0, &(0x7f0000001240)=[{0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:44 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:44 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:44 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x0, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:44 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x1, 0x0, &(0x7f0000001240)=[{0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:45 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001c40)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:45 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:45 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:45 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:45 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001c40)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:45 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x1, 0x0, &(0x7f0000001240)=[{0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:45 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:45 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x1, 0x0, &(0x7f0000001240)=[{0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:45 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x0, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:45 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:45 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x0, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:45 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001c40)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:45 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:45 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:45 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) 14:21:46 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:46 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x0, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:46 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:46 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:46 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:46 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x0, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:46 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) 14:21:46 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x0, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:46 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:46 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:46 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:46 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) 14:21:47 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:47 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x0, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:47 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:47 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:47 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:47 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001c40)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) 14:21:47 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:47 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) 14:21:47 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:47 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:47 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:47 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001c40)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) 14:21:47 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:47 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}]}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:47 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:48 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) 14:21:48 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) 14:21:48 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001c40)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) 14:21:48 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:48 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:48 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}]}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:48 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) 14:21:48 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:48 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}]}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:48 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:48 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001c40)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)) 14:21:48 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001c40)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) 14:21:48 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}]}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:48 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:48 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}]}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:48 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001c40)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)) 14:21:49 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(0x0, 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:49 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) 14:21:49 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) 14:21:49 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}]}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:49 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) 14:21:49 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001c40)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)) 14:21:49 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(0x0, 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:49 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) 14:21:49 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(0x0, 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:49 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:49 executing program 5: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x1, 0xffffffffffffffff}) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)=0x274) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000000c0)={0xc67e, 0x3, [{0x8}, {0x7, 0x1}, {0xd}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffffffff, 0x101a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x1000}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socketpair(0x18, 0x6, 0x2, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r2, 0x0, 0x0, 0x1, 0x0, 0x1}) 14:21:49 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(0x0, 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:49 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(0x0, 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:49 executing program 2: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x1, 0xffffffffffffffff}) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)=0x274) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000000c0)={0xc67e, 0x3, [{0x8}, {0x7, 0x1}, {0xd}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffffffff, 0x101a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x1000}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socketpair(0x18, 0x6, 0x2, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r2, 0x0, 0x0, 0x1, 0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000280), 0x2, 0x0) 14:21:49 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(0x0, 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:49 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) 14:21:49 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r4}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r3}) 14:21:50 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r4}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r3}) 14:21:50 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) 14:21:50 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(0x0, 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:50 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(0x0, 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:50 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x0, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:50 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r4}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r3}) 14:21:50 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r4}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r3}) 14:21:50 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) 14:21:50 executing program 5: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x1, 0xffffffffffffffff}) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)=0x274) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000000c0)={0xc67e, 0x3, [{0x8}, {0x7, 0x1}, {0xd}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffffffff, 0x101a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x1000}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socketpair(0x18, 0x6, 0x2, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r2, 0x0, 0x0, 0x1, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000004c0)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x4, 0x9, 0x2}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x5, &(0x7f0000000580)={r4, r5+10000000}, 0x1, 0x0, 0x1}) 14:21:50 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x0, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:50 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x0, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:50 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) 14:21:50 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:51 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r4}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r3}) 14:21:51 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x0, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:51 executing program 5: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x1, 0xffffffffffffffff}) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)=0x274) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000000c0)={0xc67e, 0x3, [{0x8}, {0x7, 0x1}, {0xd}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffffffff, 0x101a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x1000}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socketpair(0x18, 0x6, 0x2, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r2, 0x0, 0x0, 0x1, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000004c0)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x4, 0x9, 0x2}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x5, &(0x7f0000000580)={r4, r5+10000000}, 0x1, 0x0, 0x1}) syz_open_dev$vcsu(&(0x7f0000000600), 0x2, 0x280002) 14:21:51 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x0, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:51 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x0, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:51 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:51 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:51 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:51 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:51 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x0, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:51 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:51 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:51 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:51 executing program 1: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x1, 0xffffffffffffffff}) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)=0x274) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000000c0)={0xc67e, 0x3, [{0x8}, {0x7, 0x1}, {0xd}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffffffff, 0x101a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x1000}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socketpair(0x18, 0x6, 0x2, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r2, 0x0, 0x0, 0x1, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000004c0)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x4, 0x9, 0x2}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x5, &(0x7f0000000580)={r4, r5+10000000}, 0x1, 0x0, 0x1}) r6 = syz_open_dev$vcsu(&(0x7f0000000600), 0x2, 0x280002) ioctl$USBDEVFS_WAIT_FOR_RESUME(r6, 0x5523) clock_gettime(0x5, &(0x7f0000000640)) 14:21:51 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:52 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) 14:21:52 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:52 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) 14:21:52 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:52 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:52 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:52 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:52 executing program 4: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x1, 0xffffffffffffffff}) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)=0x274) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000000c0)={0xc67e, 0x3, [{0x8}, {0x7, 0x1}, {0xd}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffffffff, 0x101a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x1000}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socketpair(0x18, 0x6, 0x2, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r2, 0x0, 0x0, 0x1, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000004c0)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x4, 0x9, 0x2}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x5, &(0x7f0000000580)={r4, r5+10000000}, 0x1, 0x0, 0x1}) r6 = syz_open_dev$vcsu(&(0x7f0000000600), 0x2, 0x280002) ioctl$USBDEVFS_WAIT_FOR_RESUME(r6, 0x5523) clock_gettime(0x5, &(0x7f0000000640)) r7 = syz_io_uring_complete(0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f0000000680)) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f00000006c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4000, 0x1}) 14:21:52 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:52 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r1, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r2}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:52 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:52 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r1, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r2}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:52 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:52 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:52 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) 14:21:52 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r1, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r2}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:53 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r1, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r2}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:53 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r1, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r2}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:53 executing program 5: syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffffffff, 0x0) 14:21:53 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) 14:21:53 executing program 5: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x1, 0xffffffffffffffff}) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)=0x274) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000000c0)={0xc67e, 0x3, [{0x8}, {0x7, 0x1}, {0xd}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffffffff, 0x101a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x1000}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socketpair(0x18, 0x6, 0x2, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r2, 0x0, 0x0, 0x1, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000004c0)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x4, 0x9, 0x2}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x5, &(0x7f0000000580)={r4, r5+10000000}, 0x1, 0x0, 0x1}) r6 = syz_open_dev$vcsu(&(0x7f0000000600), 0x2, 0x280002) ioctl$USBDEVFS_WAIT_FOR_RESUME(r6, 0x5523) clock_gettime(0x5, &(0x7f0000000640)) r7 = syz_io_uring_complete(0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f0000000680)) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f00000006c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4000, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000009c0)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], 0x7, 0xa, 0x4}) syz_io_uring_setup(0x6b08, &(0x7f0000000a40)={0x0, 0xa201, 0x20, 0x3, 0xfc, 0x0, r6}, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)) syz_io_uring_complete(r8) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000b40)={0xffff, r1, 0x80000}) 14:21:53 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r1, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r2}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:53 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r1, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r2}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:53 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r1, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r2}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:53 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:53 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) 14:21:53 executing program 2: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x1, 0xffffffffffffffff}) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)=0x274) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000000c0)={0xc67e, 0x3, [{0x8}, {0x7, 0x1}, {0xd}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffffffff, 0x101a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x1000}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socketpair(0x18, 0x6, 0x2, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r2, 0x0, 0x0, 0x1, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000004c0)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x4, 0x9, 0x2}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x5, &(0x7f0000000580)={r4, r5+10000000}, 0x1, 0x0, 0x1}) r6 = syz_open_dev$vcsu(&(0x7f0000000600), 0x2, 0x280002) ioctl$USBDEVFS_WAIT_FOR_RESUME(r6, 0x5523) clock_gettime(0x5, &(0x7f0000000640)) r7 = syz_io_uring_complete(0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f0000000680)) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f00000006c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4000, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000009c0)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], 0x7, 0xa, 0x4}) syz_io_uring_setup(0x6b08, &(0x7f0000000a40)={0x0, 0xa201, 0x20, 0x3, 0xfc, 0x0, r6}, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)) syz_io_uring_complete(r8) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000b40)={0xffff, r1, 0x80000}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'ip6_vti0\x00', 0x0, 0x4, 0x20, 0x3f, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x0, 0x80, 0x8, 0x9}}) 14:21:53 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x0, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:53 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x0, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:53 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r1, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r2}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:53 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r1, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r2}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:53 executing program 2: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x1, 0xffffffffffffffff}) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)=0x274) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000000c0)={0xc67e, 0x3, [{0x8}, {0x7, 0x1}, {0xd}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffffffff, 0x101a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x1000}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socketpair(0x18, 0x6, 0x2, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r2, 0x0, 0x0, 0x1, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000004c0)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x4, 0x9, 0x2}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x5, &(0x7f0000000580)={r4, r5+10000000}, 0x1, 0x0, 0x1}) r6 = syz_open_dev$vcsu(&(0x7f0000000600), 0x2, 0x280002) ioctl$USBDEVFS_WAIT_FOR_RESUME(r6, 0x5523) clock_gettime(0x5, &(0x7f0000000640)) r7 = syz_io_uring_complete(0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f0000000680)) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f00000006c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4000, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000009c0)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], 0x7, 0xa, 0x4}) syz_io_uring_setup(0x6b08, &(0x7f0000000a40)={0x0, 0xa201, 0x20, 0x3, 0xfc, 0x0, r6}, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)) syz_io_uring_complete(r8) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000b40)={0xffff, r1, 0x80000}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'ip6_vti0\x00', 0x0, 0x4, 0x20, 0x3f, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x0, 0x80, 0x8, 0x9}}) 14:21:53 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x0, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:53 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:54 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002100)={0x5, "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"}) 14:21:54 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x0, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:54 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x0, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:54 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002100)={0x5, "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"}) 14:21:54 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002100)={0x5, "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"}) 14:21:54 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x0, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:54 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x0, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:54 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x0, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:54 executing program 4: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x1, 0xffffffffffffffff}) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)=0x274) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000000c0)={0xc67e, 0x3, [{0x8}, {0x7, 0x1}, {0xd}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffffffff, 0x101a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x1000}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socketpair(0x18, 0x6, 0x2, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r2, 0x0, 0x0, 0x1, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000004c0)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x4, 0x9, 0x2}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x5, &(0x7f0000000580)={r4, r5+10000000}, 0x1, 0x0, 0x1}) r6 = syz_open_dev$vcsu(&(0x7f0000000600), 0x2, 0x280002) ioctl$USBDEVFS_WAIT_FOR_RESUME(r6, 0x5523) clock_gettime(0x5, &(0x7f0000000640)) r7 = syz_io_uring_complete(0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f0000000680)) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f00000006c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4000, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000009c0)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], 0x7, 0xa, 0x4}) syz_io_uring_setup(0x6b08, &(0x7f0000000a40)={0x0, 0xa201, 0x20, 0x3, 0xfc, 0x0, r6}, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)) syz_io_uring_complete(r8) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000b40)={0xffff, r1, 0x80000}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'ip6_vti0\x00', 0x0, 0x4, 0x20, 0x3f, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x0, 0x80, 0x8, 0x9}}) ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f0000000cc0)={{{0x8}}, 0x50, 0x9, &(0x7f0000000c40)="5a0986c3337702b4c52302ca754f0c1d3529b26a15edbbe23003114c29dea6563b936610945ee1ad3b30459f1f564c795f687b21ddd33fdcf17f29a7de556c74943c346943d0ed91156695e7ccea5eb9"}) syz_open_dev$vcsu(&(0x7f0000000d00), 0x0, 0x450a80) 14:21:54 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:54 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002100)={0x5, "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"}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:54 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:54 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x0, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:54 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:54 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002100)={0x5, "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"}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:54 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:54 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:54 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:55 executing program 1: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffffffff, 0x101a01) 14:21:55 executing program 2: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x1, 0xffffffffffffffff}) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)=0x274) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000000c0)={0xc67e, 0x3, [{0x8}, {0x7, 0x1}, {0xd}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffffffff, 0x101a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x1000}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socketpair(0x18, 0x6, 0x2, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r2, 0x0, 0x0, 0x1, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000004c0)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x4, 0x9, 0x2}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x5, &(0x7f0000000580)={r5, r6+10000000}, 0x1, 0x0, 0x1}) r7 = syz_open_dev$vcsu(&(0x7f0000000600), 0x2, 0x280002) ioctl$USBDEVFS_WAIT_FOR_RESUME(r7, 0x5523) clock_gettime(0x5, &(0x7f0000000640)) r8 = syz_io_uring_complete(0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r8, 0x4004551e, &(0x7f0000000680)) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f00000006c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4000, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000009c0)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], 0x7, 0xa, 0x4}) syz_io_uring_setup(0x6b08, &(0x7f0000000a40)={0x0, 0xa201, 0x20, 0x3, 0xfc, 0x0, r7}, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)) syz_io_uring_complete(r9) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000b40)={0xffff, r1, 0x80000}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'ip6_vti0\x00', 0x0, 0x4, 0x20, 0x3f, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x0, 0x80, 0x8, 0x9}}) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f0000000cc0)={{{0x8}}, 0x50, 0x9, &(0x7f0000000c40)="5a0986c3337702b4c52302ca754f0c1d3529b26a15edbbe23003114c29dea6563b936610945ee1ad3b30459f1f564c795f687b21ddd33fdcf17f29a7de556c74943c346943d0ed91156695e7ccea5eb9"}) r11 = syz_open_dev$vcsu(&(0x7f0000000d00), 0x0, 0x450a80) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r11, 0xc01064ab, &(0x7f0000000d40)={0x35, r4}) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) 14:21:55 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002100)={0x5, "1c62093ce42a3685430cfa2c809af8c795fe904d8bf09980d63c7ad9bb2c51e57e6d0a41136943c63f5ce96540d6a905388f2ce38509431161ff9dc5daf0b668a566f95ea1a3a2c41d01e8ceb0dd750a84c9ece22841a464ff36ed7e978f9af090232611da18afa4c721c8dc60f3a8991b2515760f0b53909c3a4ddf3241503aa9d613714ccd4e32cfe4c3248527f036ceaadc085148b44a6ec0e5062fbe155c658d182bf7426abd67d936612c9dac3b422ab63bc7ffa3d43a0757aecdd69c883534ccb52faa9a5e79469d52a01e9bab1407a3d49616f086e33e160ce7ef2529ffd7b0f1f426cee1bb5e200bf7611493a328823e50c9909b2a1a6f5ae0e63596"}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:55 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:55 executing program 4: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x1}) syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffffffff, 0x101a01) 14:21:55 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:55 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:55 executing program 1: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x1}) syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffffffff, 0x101a01) 14:21:55 executing program 4: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x1, 0xffffffffffffffff}) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)=0x274) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000000c0)={0xc67e, 0x3, [{0x8}, {0x7, 0x1}, {0xd}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffffffff, 0x101a01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x1000}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 14:21:55 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:55 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002100)={0x5, "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"}) r12 = syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) ioctl$USBDEVFS_REAPURBNDELAY(r12, 0x4008550d, &(0x7f0000002280)) 14:21:55 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002100)={0x5, "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"}) r12 = syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) ioctl$USBDEVFS_REAPURBNDELAY(r12, 0x4008550d, &(0x7f0000002280)) 14:21:55 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:55 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002100)={0x5, "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"}) r12 = syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) ioctl$USBDEVFS_REAPURBNDELAY(r12, 0x4008550d, &(0x7f0000002280)) 14:21:55 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002100)={0x5, "1c62093ce42a3685430cfa2c809af8c795fe904d8bf09980d63c7ad9bb2c51e57e6d0a41136943c63f5ce96540d6a905388f2ce38509431161ff9dc5daf0b668a566f95ea1a3a2c41d01e8ceb0dd750a84c9ece22841a464ff36ed7e978f9af090232611da18afa4c721c8dc60f3a8991b2515760f0b53909c3a4ddf3241503aa9d613714ccd4e32cfe4c3248527f036ceaadc085148b44a6ec0e5062fbe155c658d182bf7426abd67d936612c9dac3b422ab63bc7ffa3d43a0757aecdd69c883534ccb52faa9a5e79469d52a01e9bab1407a3d49616f086e33e160ce7ef2529ffd7b0f1f426cee1bb5e200bf7611493a328823e50c9909b2a1a6f5ae0e63596"}) r12 = syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) ioctl$USBDEVFS_REAPURBNDELAY(r12, 0x4008550d, &(0x7f0000002280)) 14:21:55 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:55 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:55 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002100)={0x5, "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"}) r12 = syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) ioctl$USBDEVFS_REAPURBNDELAY(r12, 0x4008550d, &(0x7f0000002280)) 14:21:55 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:55 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002100)={0x5, "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"}) r12 = syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) ioctl$USBDEVFS_REAPURBNDELAY(r12, 0x4008550d, &(0x7f0000002280)) 14:21:56 executing program 4: ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000000)={0xffffffffffffffff, 0x10001, 0x7f, "9e3a12719dabb20056641fa74bee16848e1fea57decd0bf2ed61716e377a27fc618d7047d513f61701b01f81a8c86c3b3b593ca3f75617e7cf490c30271935171f8311bf4ee78855b3debaf53911c09961c9ec615b8d5a946122f4cb9da8b73d3e2abeaa9d824658f7b061fb5cc9a23f9e061744423a1d21f89a4fac28427c4c9d551bd4df87facc618f8e1897a9c6c5d80516ce536ed3bd7981183f2606ecd0643a97c514d217e88af5262f9bf6702c6ba9f8e51322b9e353be39d30b7b9a118e05f7cb9ce457b730a821"}) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000100)={0x200, 0xfff, 0x5, 0x3}, 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x9}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0xd0, "ec2f360dbfd41d37534b05b71a397e2c7f51b7eddd58271fc7027ea236256907997d60068c13b99856ee713ca68a1adbb27dc925b98463319f89324b5ca3333fd2b562ad2f3b3bd895904dafc008546175f84107c53ea1bc43ca6d1edec2474498d7b0544cc8e71ec970f08a2977b9e6d5d8ec3038b9dd0c24cd423f18e9d3b1cb219f2882e59ec64c624d0d85980aae6d677839adfd6567710fd8dabe58626cf75a5dace6fb7ff213fb1cbda27533426e733dcfeae2299e7e7fee193da5102a5dc9bba9b4357f891e84be7858581473"}, &(0x7f0000000300)=0xd8) r3 = syz_io_uring_complete(0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={r2, 0x1, 0x3, [0x0, 0x3, 0x5]}, &(0x7f0000000380)=0xe) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e20, 0x20, @rand_addr=' \x01\x00', 0x1}}}, &(0x7f0000000480)=0x84) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x8000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e21, 0xb53a, @remote, 0x101}}, 0x1}, 0x90) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000580)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000005c0)={r2, 0x40, 0x1, [0x5]}, &(0x7f0000000600)=0xa) socketpair(0x27, 0x2, 0x81, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000680)={r7, 0x9, 0x8, [0xff, 0x81, 0x8, 0x7fff, 0x7ff, 0xe000, 0x6, 0xfff9]}, &(0x7f00000006c0)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000700)={r10, 0x6}, &(0x7f0000000740)=0x8) socket$inet_tcp(0x2, 0x1, 0x0) r12 = io_uring_setup(0x7f77, &(0x7f0000000780)={0x0, 0xf988, 0x20, 0x2, 0x372, 0x0, r1}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000800)={0x1, r0, 0xa12658f7f0bc8ba1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r13, 0x84, 0x1a, &(0x7f0000000840)={r11, 0xe4, "eb5531569cc3a92ae3e83886f6de7f5c7800664551a0aa3dd97da17963fd5f419bc7dd9ddbd6c53bae649ad464ad364d6e306e859e11f46c88fdfa51ccd0dd941582dfdab683471ea46dbd185bca585ffa64487094f33a80cbb4f49a038a0867225831cbb69005220418b25a541a06c3e26acb92b5cbbcf1ae836bf2b1e53472af197c9998447bafd9a577dc6b852306a1e2b5f56485fcc4c55a65b57b1159052e9738b656b0dcdf4196b4ee15944ca83561725cb0d61ff5acf1df7e39ed081cbd8284b404623417755da501b77d4667878b5f2109cbc7af0d6f0c441562e307dc977735"}, &(0x7f0000000940)=0xec) syz_io_uring_setup(0xac2, &(0x7f0000000980)={0x0, 0xdb57, 0x800, 0x0, 0x19f, 0x0, r12}, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x0) syz_io_uring_submit(r6, r16, &(0x7f0000000b40)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r9, &(0x7f0000000a80)=0x80, &(0x7f0000000ac0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x0, 0x800, 0x1}) syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r9) r17 = socket(0x22, 0x80806, 0x3) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r17, 0x84, 0x1e, &(0x7f0000000bc0)=0x3, 0x4) write$nbd(r13, &(0x7f0000000c00)={0x67446698, 0x0, 0x3, 0x4, 0x4, "ec8415427b860f77db00c95e953084"}, 0x1f) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000000c40)={r5, 0x7, 0x3}, 0x8) r18 = syz_io_uring_complete(r15) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r18, 0x84, 0x10, &(0x7f0000000c80)=@assoc_value={r14, 0xd}, &(0x7f0000000cc0)=0x8) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r17, 0x84, 0xc, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) 14:21:56 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:56 executing program 1: ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000000)={0xffffffffffffffff, 0x10001, 0x7f, "9e3a12719dabb20056641fa74bee16848e1fea57decd0bf2ed61716e377a27fc618d7047d513f61701b01f81a8c86c3b3b593ca3f75617e7cf490c30271935171f8311bf4ee78855b3debaf53911c09961c9ec615b8d5a946122f4cb9da8b73d3e2abeaa9d824658f7b061fb5cc9a23f9e061744423a1d21f89a4fac28427c4c9d551bd4df87facc618f8e1897a9c6c5d80516ce536ed3bd7981183f2606ecd0643a97c514d217e88af5262f9bf6702c6ba9f8e51322b9e353be39d30b7b9a118e05f7cb9ce457b730a821"}) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000100)={0x200, 0xfff, 0x5, 0x3}, 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x9}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0xd0, "ec2f360dbfd41d37534b05b71a397e2c7f51b7eddd58271fc7027ea236256907997d60068c13b99856ee713ca68a1adbb27dc925b98463319f89324b5ca3333fd2b562ad2f3b3bd895904dafc008546175f84107c53ea1bc43ca6d1edec2474498d7b0544cc8e71ec970f08a2977b9e6d5d8ec3038b9dd0c24cd423f18e9d3b1cb219f2882e59ec64c624d0d85980aae6d677839adfd6567710fd8dabe58626cf75a5dace6fb7ff213fb1cbda27533426e733dcfeae2299e7e7fee193da5102a5dc9bba9b4357f891e84be7858581473"}, &(0x7f0000000300)=0xd8) r3 = syz_io_uring_complete(0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={r2, 0x1, 0x3, [0x0, 0x3, 0x5]}, &(0x7f0000000380)=0xe) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e20, 0x20, @rand_addr=' \x01\x00', 0x1}}}, &(0x7f0000000480)=0x84) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x8000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e21, 0xb53a, @remote, 0x101}}, 0x1}, 0x90) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000580)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000005c0)={r2, 0x40, 0x1, [0x5]}, &(0x7f0000000600)=0xa) socketpair(0x27, 0x2, 0x81, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000680)={r7, 0x9, 0x8, [0xff, 0x81, 0x8, 0x7fff, 0x7ff, 0xe000, 0x6, 0xfff9]}, &(0x7f00000006c0)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000700)={r10, 0x6}, &(0x7f0000000740)=0x8) socket$inet_tcp(0x2, 0x1, 0x0) r12 = io_uring_setup(0x7f77, &(0x7f0000000780)={0x0, 0xf988, 0x20, 0x2, 0x372, 0x0, r1}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000800)={0x1, r0, 0xa12658f7f0bc8ba1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r13, 0x84, 0x1a, &(0x7f0000000840)={r11, 0xe4, "eb5531569cc3a92ae3e83886f6de7f5c7800664551a0aa3dd97da17963fd5f419bc7dd9ddbd6c53bae649ad464ad364d6e306e859e11f46c88fdfa51ccd0dd941582dfdab683471ea46dbd185bca585ffa64487094f33a80cbb4f49a038a0867225831cbb69005220418b25a541a06c3e26acb92b5cbbcf1ae836bf2b1e53472af197c9998447bafd9a577dc6b852306a1e2b5f56485fcc4c55a65b57b1159052e9738b656b0dcdf4196b4ee15944ca83561725cb0d61ff5acf1df7e39ed081cbd8284b404623417755da501b77d4667878b5f2109cbc7af0d6f0c441562e307dc977735"}, &(0x7f0000000940)=0xec) syz_io_uring_setup(0xac2, &(0x7f0000000980)={0x0, 0xdb57, 0x800, 0x0, 0x19f, 0x0, r12}, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x0) syz_io_uring_submit(r6, r16, &(0x7f0000000b40)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r9, &(0x7f0000000a80)=0x80, &(0x7f0000000ac0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x0, 0x800, 0x1}) syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r9) r17 = socket(0x22, 0x80806, 0x3) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r17, 0x84, 0x1e, &(0x7f0000000bc0)=0x3, 0x4) write$nbd(r13, &(0x7f0000000c00)={0x67446698, 0x0, 0x3, 0x4, 0x4, "ec8415427b860f77db00c95e953084"}, 0x1f) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000000c40)={r5, 0x7, 0x3}, 0x8) r18 = syz_io_uring_complete(r15) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r18, 0x84, 0x10, &(0x7f0000000c80)=@assoc_value={r14, 0xd}, &(0x7f0000000cc0)=0x8) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r17, 0x84, 0xc, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) 14:21:56 executing program 1: ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000000)={0xffffffffffffffff, 0x10001, 0x7f, "9e3a12719dabb20056641fa74bee16848e1fea57decd0bf2ed61716e377a27fc618d7047d513f61701b01f81a8c86c3b3b593ca3f75617e7cf490c30271935171f8311bf4ee78855b3debaf53911c09961c9ec615b8d5a946122f4cb9da8b73d3e2abeaa9d824658f7b061fb5cc9a23f9e061744423a1d21f89a4fac28427c4c9d551bd4df87facc618f8e1897a9c6c5d80516ce536ed3bd7981183f2606ecd0643a97c514d217e88af5262f9bf6702c6ba9f8e51322b9e353be39d30b7b9a118e05f7cb9ce457b730a821"}) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000100)={0x200, 0xfff, 0x5, 0x3}, 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x9}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0xd0, "ec2f360dbfd41d37534b05b71a397e2c7f51b7eddd58271fc7027ea236256907997d60068c13b99856ee713ca68a1adbb27dc925b98463319f89324b5ca3333fd2b562ad2f3b3bd895904dafc008546175f84107c53ea1bc43ca6d1edec2474498d7b0544cc8e71ec970f08a2977b9e6d5d8ec3038b9dd0c24cd423f18e9d3b1cb219f2882e59ec64c624d0d85980aae6d677839adfd6567710fd8dabe58626cf75a5dace6fb7ff213fb1cbda27533426e733dcfeae2299e7e7fee193da5102a5dc9bba9b4357f891e84be7858581473"}, &(0x7f0000000300)=0xd8) r3 = syz_io_uring_complete(0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={r2, 0x1, 0x3, [0x0, 0x3, 0x5]}, &(0x7f0000000380)=0xe) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e20, 0x20, @rand_addr=' \x01\x00', 0x1}}}, &(0x7f0000000480)=0x84) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x8000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e21, 0xb53a, @remote, 0x101}}, 0x1}, 0x90) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000580)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000005c0)={r2, 0x40, 0x1, [0x5]}, &(0x7f0000000600)=0xa) socketpair(0x27, 0x2, 0x81, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000680)={r7, 0x9, 0x8, [0xff, 0x81, 0x8, 0x7fff, 0x7ff, 0xe000, 0x6, 0xfff9]}, &(0x7f00000006c0)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000700)={r10, 0x6}, &(0x7f0000000740)=0x8) socket$inet_tcp(0x2, 0x1, 0x0) r12 = io_uring_setup(0x7f77, &(0x7f0000000780)={0x0, 0xf988, 0x20, 0x2, 0x372, 0x0, r1}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000800)={0x1, r0, 0xa12658f7f0bc8ba1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r13, 0x84, 0x1a, &(0x7f0000000840)={r11, 0xe4, "eb5531569cc3a92ae3e83886f6de7f5c7800664551a0aa3dd97da17963fd5f419bc7dd9ddbd6c53bae649ad464ad364d6e306e859e11f46c88fdfa51ccd0dd941582dfdab683471ea46dbd185bca585ffa64487094f33a80cbb4f49a038a0867225831cbb69005220418b25a541a06c3e26acb92b5cbbcf1ae836bf2b1e53472af197c9998447bafd9a577dc6b852306a1e2b5f56485fcc4c55a65b57b1159052e9738b656b0dcdf4196b4ee15944ca83561725cb0d61ff5acf1df7e39ed081cbd8284b404623417755da501b77d4667878b5f2109cbc7af0d6f0c441562e307dc977735"}, &(0x7f0000000940)=0xec) syz_io_uring_setup(0xac2, &(0x7f0000000980)={0x0, 0xdb57, 0x800, 0x0, 0x19f, 0x0, r12}, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x0) syz_io_uring_submit(r6, r16, &(0x7f0000000b40)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r9, &(0x7f0000000a80)=0x80, &(0x7f0000000ac0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x0, 0x800, 0x1}) syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r9) r17 = socket(0x22, 0x80806, 0x3) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r17, 0x84, 0x1e, &(0x7f0000000bc0)=0x3, 0x4) write$nbd(r13, &(0x7f0000000c00)={0x67446698, 0x0, 0x3, 0x4, 0x4, "ec8415427b860f77db00c95e953084"}, 0x1f) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000000c40)={r5, 0x7, 0x3}, 0x8) r18 = syz_io_uring_complete(r15) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r18, 0x84, 0x10, &(0x7f0000000c80)=@assoc_value={r14, 0xd}, &(0x7f0000000cc0)=0x8) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r17, 0x84, 0xc, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) 14:21:56 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, 0x0) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:56 executing program 4: ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000000)={0xffffffffffffffff, 0x10001, 0x7f, "9e3a12719dabb20056641fa74bee16848e1fea57decd0bf2ed61716e377a27fc618d7047d513f61701b01f81a8c86c3b3b593ca3f75617e7cf490c30271935171f8311bf4ee78855b3debaf53911c09961c9ec615b8d5a946122f4cb9da8b73d3e2abeaa9d824658f7b061fb5cc9a23f9e061744423a1d21f89a4fac28427c4c9d551bd4df87facc618f8e1897a9c6c5d80516ce536ed3bd7981183f2606ecd0643a97c514d217e88af5262f9bf6702c6ba9f8e51322b9e353be39d30b7b9a118e05f7cb9ce457b730a821"}) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000100)={0x200, 0xfff, 0x5, 0x3}, 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x9}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0xd0, "ec2f360dbfd41d37534b05b71a397e2c7f51b7eddd58271fc7027ea236256907997d60068c13b99856ee713ca68a1adbb27dc925b98463319f89324b5ca3333fd2b562ad2f3b3bd895904dafc008546175f84107c53ea1bc43ca6d1edec2474498d7b0544cc8e71ec970f08a2977b9e6d5d8ec3038b9dd0c24cd423f18e9d3b1cb219f2882e59ec64c624d0d85980aae6d677839adfd6567710fd8dabe58626cf75a5dace6fb7ff213fb1cbda27533426e733dcfeae2299e7e7fee193da5102a5dc9bba9b4357f891e84be7858581473"}, &(0x7f0000000300)=0xd8) r3 = syz_io_uring_complete(0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={r2, 0x1, 0x3, [0x0, 0x3, 0x5]}, &(0x7f0000000380)=0xe) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e20, 0x20, @rand_addr=' \x01\x00', 0x1}}}, &(0x7f0000000480)=0x84) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x8000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e21, 0xb53a, @remote, 0x101}}, 0x1}, 0x90) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000580)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000005c0)={r2, 0x40, 0x1, [0x5]}, &(0x7f0000000600)=0xa) socketpair(0x27, 0x2, 0x81, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000680)={r7, 0x9, 0x8, [0xff, 0x81, 0x8, 0x7fff, 0x7ff, 0xe000, 0x6, 0xfff9]}, &(0x7f00000006c0)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000700)={r10, 0x6}, &(0x7f0000000740)=0x8) socket$inet_tcp(0x2, 0x1, 0x0) r12 = io_uring_setup(0x7f77, &(0x7f0000000780)={0x0, 0xf988, 0x20, 0x2, 0x372, 0x0, r1}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000800)={0x1, r0, 0xa12658f7f0bc8ba1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r13, 0x84, 0x1a, &(0x7f0000000840)={r11, 0xe4, "eb5531569cc3a92ae3e83886f6de7f5c7800664551a0aa3dd97da17963fd5f419bc7dd9ddbd6c53bae649ad464ad364d6e306e859e11f46c88fdfa51ccd0dd941582dfdab683471ea46dbd185bca585ffa64487094f33a80cbb4f49a038a0867225831cbb69005220418b25a541a06c3e26acb92b5cbbcf1ae836bf2b1e53472af197c9998447bafd9a577dc6b852306a1e2b5f56485fcc4c55a65b57b1159052e9738b656b0dcdf4196b4ee15944ca83561725cb0d61ff5acf1df7e39ed081cbd8284b404623417755da501b77d4667878b5f2109cbc7af0d6f0c441562e307dc977735"}, &(0x7f0000000940)=0xec) syz_io_uring_setup(0xac2, &(0x7f0000000980)={0x0, 0xdb57, 0x800, 0x0, 0x19f, 0x0, r12}, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x0) syz_io_uring_submit(r6, r16, &(0x7f0000000b40)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r9, &(0x7f0000000a80)=0x80, &(0x7f0000000ac0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x0, 0x800, 0x1}) syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r9) r17 = socket(0x22, 0x80806, 0x3) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r17, 0x84, 0x1e, &(0x7f0000000bc0)=0x3, 0x4) write$nbd(r13, &(0x7f0000000c00)={0x67446698, 0x0, 0x3, 0x4, 0x4, "ec8415427b860f77db00c95e953084"}, 0x1f) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000000c40)={r5, 0x7, 0x3}, 0x8) r18 = syz_io_uring_complete(r15) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r18, 0x84, 0x10, &(0x7f0000000c80)=@assoc_value={r14, 0xd}, &(0x7f0000000cc0)=0x8) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r17, 0x84, 0xc, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) 14:21:56 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002100)={0x5, "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"}) r12 = syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) ioctl$USBDEVFS_REAPURBNDELAY(r12, 0x4008550d, &(0x7f0000002280)) 14:21:56 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002100)={0x5, "1c62093ce42a3685430cfa2c809af8c795fe904d8bf09980d63c7ad9bb2c51e57e6d0a41136943c63f5ce96540d6a905388f2ce38509431161ff9dc5daf0b668a566f95ea1a3a2c41d01e8ceb0dd750a84c9ece22841a464ff36ed7e978f9af090232611da18afa4c721c8dc60f3a8991b2515760f0b53909c3a4ddf3241503aa9d613714ccd4e32cfe4c3248527f036ceaadc085148b44a6ec0e5062fbe155c658d182bf7426abd67d936612c9dac3b422ab63bc7ffa3d43a0757aecdd69c883534ccb52faa9a5e79469d52a01e9bab1407a3d49616f086e33e160ce7ef2529ffd7b0f1f426cee1bb5e200bf7611493a328823e50c9909b2a1a6f5ae0e63596"}) r12 = syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) ioctl$USBDEVFS_REAPURBNDELAY(r12, 0x4008550d, &(0x7f0000002280)) 14:21:56 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, 0x0) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:56 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, 0x0) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:56 executing program 1: ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000000)={0xffffffffffffffff, 0x10001, 0x7f, "9e3a12719dabb20056641fa74bee16848e1fea57decd0bf2ed61716e377a27fc618d7047d513f61701b01f81a8c86c3b3b593ca3f75617e7cf490c30271935171f8311bf4ee78855b3debaf53911c09961c9ec615b8d5a946122f4cb9da8b73d3e2abeaa9d824658f7b061fb5cc9a23f9e061744423a1d21f89a4fac28427c4c9d551bd4df87facc618f8e1897a9c6c5d80516ce536ed3bd7981183f2606ecd0643a97c514d217e88af5262f9bf6702c6ba9f8e51322b9e353be39d30b7b9a118e05f7cb9ce457b730a821"}) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000100)={0x200, 0xfff, 0x5, 0x3}, 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x9}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0xd0, "ec2f360dbfd41d37534b05b71a397e2c7f51b7eddd58271fc7027ea236256907997d60068c13b99856ee713ca68a1adbb27dc925b98463319f89324b5ca3333fd2b562ad2f3b3bd895904dafc008546175f84107c53ea1bc43ca6d1edec2474498d7b0544cc8e71ec970f08a2977b9e6d5d8ec3038b9dd0c24cd423f18e9d3b1cb219f2882e59ec64c624d0d85980aae6d677839adfd6567710fd8dabe58626cf75a5dace6fb7ff213fb1cbda27533426e733dcfeae2299e7e7fee193da5102a5dc9bba9b4357f891e84be7858581473"}, &(0x7f0000000300)=0xd8) r3 = syz_io_uring_complete(0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={r2, 0x1, 0x3, [0x0, 0x3, 0x5]}, &(0x7f0000000380)=0xe) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e20, 0x20, @rand_addr=' \x01\x00', 0x1}}}, &(0x7f0000000480)=0x84) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x8000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e21, 0xb53a, @remote, 0x101}}, 0x1}, 0x90) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000580)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000005c0)={r2, 0x40, 0x1, [0x5]}, &(0x7f0000000600)=0xa) socketpair(0x27, 0x2, 0x81, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000680)={r7, 0x9, 0x8, [0xff, 0x81, 0x8, 0x7fff, 0x7ff, 0xe000, 0x6, 0xfff9]}, &(0x7f00000006c0)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000700)={r10, 0x6}, &(0x7f0000000740)=0x8) socket$inet_tcp(0x2, 0x1, 0x0) r12 = io_uring_setup(0x7f77, &(0x7f0000000780)={0x0, 0xf988, 0x20, 0x2, 0x372, 0x0, r1}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000800)={0x1, r0, 0xa12658f7f0bc8ba1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r13, 0x84, 0x1a, &(0x7f0000000840)={r11, 0xe4, "eb5531569cc3a92ae3e83886f6de7f5c7800664551a0aa3dd97da17963fd5f419bc7dd9ddbd6c53bae649ad464ad364d6e306e859e11f46c88fdfa51ccd0dd941582dfdab683471ea46dbd185bca585ffa64487094f33a80cbb4f49a038a0867225831cbb69005220418b25a541a06c3e26acb92b5cbbcf1ae836bf2b1e53472af197c9998447bafd9a577dc6b852306a1e2b5f56485fcc4c55a65b57b1159052e9738b656b0dcdf4196b4ee15944ca83561725cb0d61ff5acf1df7e39ed081cbd8284b404623417755da501b77d4667878b5f2109cbc7af0d6f0c441562e307dc977735"}, &(0x7f0000000940)=0xec) syz_io_uring_setup(0xac2, &(0x7f0000000980)={0x0, 0xdb57, 0x800, 0x0, 0x19f, 0x0, r12}, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x0) syz_io_uring_submit(r6, r16, &(0x7f0000000b40)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r9, &(0x7f0000000a80)=0x80, &(0x7f0000000ac0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x0, 0x800, 0x1}) syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r9) r17 = socket(0x22, 0x80806, 0x3) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r17, 0x84, 0x1e, &(0x7f0000000bc0)=0x3, 0x4) write$nbd(r13, &(0x7f0000000c00)={0x67446698, 0x0, 0x3, 0x4, 0x4, "ec8415427b860f77db00c95e953084"}, 0x1f) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000000c40)={r5, 0x7, 0x3}, 0x8) r18 = syz_io_uring_complete(r15) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r18, 0x84, 0x10, &(0x7f0000000c80)=@assoc_value={r14, 0xd}, &(0x7f0000000cc0)=0x8) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r17, 0x84, 0xc, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) 14:21:56 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002100)={0x5, "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"}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:56 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (fail_nth: 1) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001c40)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:56 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, 0x0) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) [ 403.253228][T26420] FAULT_INJECTION: forcing a failure. [ 403.253228][T26420] name failslab, interval 1, probability 0, space 0, times 1 [ 403.322093][T26420] CPU: 1 PID: 26420 Comm: syz-executor.4 Not tainted 6.6.0-rc1-syzkaller #0 [ 403.330845][T26420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 403.340956][T26420] Call Trace: [ 403.344283][T26420] [ 403.347249][T26420] dump_stack_lvl+0x125/0x1b0 [ 403.352081][T26420] should_fail_ex+0x496/0x5b0 [ 403.356845][T26420] should_failslab+0x9/0x20 [ 403.361399][T26420] kmem_cache_alloc+0x33a/0x3b0 [ 403.366305][T26420] getname_flags.part.0+0x50/0x4d0 [ 403.371465][T26420] getname+0x90/0xe0 [ 403.375399][T26420] do_sys_openat2+0x100/0x1e0 [ 403.380147][T26420] ? build_open_flags+0x690/0x690 [ 403.385214][T26420] __x64_sys_openat+0x175/0x210 [ 403.390090][T26420] ? __ia32_sys_open+0x1e0/0x1e0 [ 403.395049][T26420] ? ksys_write+0x1a7/0x250 [ 403.399581][T26420] ? rcu_is_watching+0x12/0xb0 [ 403.404396][T26420] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 403.410424][T26420] do_syscall_64+0x38/0xb0 [ 403.414897][T26420] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 403.420876][T26420] RIP: 0033:0x7f956867cae9 [ 403.425315][T26420] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 403.444957][T26420] RSP: 002b:00007f95693fc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 403.453430][T26420] RAX: ffffffffffffffda RBX: 00007f956879bf80 RCX: 00007f956867cae9 [ 403.461423][T26420] RDX: 0000000000000002 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 403.469417][T26420] RBP: 00007f95693fc120 R08: 0000000000000000 R09: 0000000000000000 [ 403.477404][T26420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.485441][T26420] R13: 000000000000000b R14: 00007f956879bf80 R15: 00007f95688bfa48 [ 403.493450][T26420] 14:21:57 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002100)={0x5, "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"}) 14:21:57 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002100)={0x5, "1c62093ce42a3685430cfa2c809af8c795fe904d8bf09980d63c7ad9bb2c51e57e6d0a41136943c63f5ce96540d6a905388f2ce38509431161ff9dc5daf0b668a566f95ea1a3a2c41d01e8ceb0dd750a84c9ece22841a464ff36ed7e978f9af090232611da18afa4c721c8dc60f3a8991b2515760f0b53909c3a4ddf3241503aa9d613714ccd4e32cfe4c3248527f036ceaadc085148b44a6ec0e5062fbe155c658d182bf7426abd67d936612c9dac3b422ab63bc7ffa3d43a0757aecdd69c883534ccb52faa9a5e79469d52a01e9bab1407a3d49616f086e33e160ce7ef2529ffd7b0f1f426cee1bb5e200bf7611493a328823e50c9909b2a1a6f5ae0e63596"}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:57 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, 0x0) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:57 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002100)={0x5, "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"}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:57 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (fail_nth: 2) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001c40)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:57 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, 0x0) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) [ 403.833187][T26451] FAULT_INJECTION: forcing a failure. [ 403.833187][T26451] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 403.852053][T26451] CPU: 1 PID: 26451 Comm: syz-executor.4 Not tainted 6.6.0-rc1-syzkaller #0 [ 403.860807][T26451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 403.870914][T26451] Call Trace: [ 403.874233][T26451] [ 403.877213][T26451] dump_stack_lvl+0x125/0x1b0 [ 403.881941][T26451] should_fail_ex+0x496/0x5b0 [ 403.886676][T26451] strncpy_from_user+0x38/0x300 [ 403.891652][T26451] getname_flags.part.0+0x93/0x4d0 [ 403.896799][T26451] getname+0x90/0xe0 [ 403.900729][T26451] do_sys_openat2+0x100/0x1e0 [ 403.905432][T26451] ? build_open_flags+0x690/0x690 [ 403.910484][T26451] __x64_sys_openat+0x175/0x210 [ 403.915357][T26451] ? __ia32_sys_open+0x1e0/0x1e0 [ 403.920331][T26451] ? ksys_write+0x1a7/0x250 [ 403.924878][T26451] ? rcu_is_watching+0x12/0xb0 [ 403.929669][T26451] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 403.935681][T26451] do_syscall_64+0x38/0xb0 [ 403.940131][T26451] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 403.946053][T26451] RIP: 0033:0x7f956867cae9 [ 403.950485][T26451] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 403.970134][T26451] RSP: 002b:00007f95693fc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 403.978575][T26451] RAX: ffffffffffffffda RBX: 00007f956879bf80 RCX: 00007f956867cae9 [ 403.986571][T26451] RDX: 0000000000000002 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 403.994563][T26451] RBP: 00007f95693fc120 R08: 0000000000000000 R09: 0000000000000000 [ 404.002555][T26451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.010545][T26451] R13: 000000000000000b R14: 00007f956879bf80 R15: 00007f95688bfa48 [ 404.018545][T26451] 14:21:57 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002100)={0x5, "1c62093ce42a3685430cfa2c809af8c795fe904d8bf09980d63c7ad9bb2c51e57e6d0a41136943c63f5ce96540d6a905388f2ce38509431161ff9dc5daf0b668a566f95ea1a3a2c41d01e8ceb0dd750a84c9ece22841a464ff36ed7e978f9af090232611da18afa4c721c8dc60f3a8991b2515760f0b53909c3a4ddf3241503aa9d613714ccd4e32cfe4c3248527f036ceaadc085148b44a6ec0e5062fbe155c658d182bf7426abd67d936612c9dac3b422ab63bc7ffa3d43a0757aecdd69c883534ccb52faa9a5e79469d52a01e9bab1407a3d49616f086e33e160ce7ef2529ffd7b0f1f426cee1bb5e200bf7611493a328823e50c9909b2a1a6f5ae0e63596"}) 14:21:57 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:57 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (fail_nth: 3) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001c40)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:57 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002100)={0x5, "1c62093ce42a3685430cfa2c809af8c795fe904d8bf09980d63c7ad9bb2c51e57e6d0a41136943c63f5ce96540d6a905388f2ce38509431161ff9dc5daf0b668a566f95ea1a3a2c41d01e8ceb0dd750a84c9ece22841a464ff36ed7e978f9af090232611da18afa4c721c8dc60f3a8991b2515760f0b53909c3a4ddf3241503aa9d613714ccd4e32cfe4c3248527f036ceaadc085148b44a6ec0e5062fbe155c658d182bf7426abd67d936612c9dac3b422ab63bc7ffa3d43a0757aecdd69c883534ccb52faa9a5e79469d52a01e9bab1407a3d49616f086e33e160ce7ef2529ffd7b0f1f426cee1bb5e200bf7611493a328823e50c9909b2a1a6f5ae0e63596"}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:57 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) [ 404.182316][T26463] FAULT_INJECTION: forcing a failure. [ 404.182316][T26463] name failslab, interval 1, probability 0, space 0, times 0 [ 404.195398][T26463] CPU: 0 PID: 26463 Comm: syz-executor.4 Not tainted 6.6.0-rc1-syzkaller #0 [ 404.204147][T26463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 404.214249][T26463] Call Trace: [ 404.217573][T26463] [ 404.220536][T26463] dump_stack_lvl+0x125/0x1b0 [ 404.225263][T26463] should_fail_ex+0x496/0x5b0 [ 404.230026][T26463] should_failslab+0x9/0x20 [ 404.234586][T26463] kmem_cache_alloc+0x33a/0x3b0 [ 404.239511][T26463] alloc_empty_file+0x73/0x1d0 [ 404.244342][T26463] path_openat+0xdc/0x29c0 [ 404.248844][T26463] ? __x64_sys_openat+0x175/0x210 [ 404.253957][T26463] ? do_syscall_64+0x38/0xb0 [ 404.258613][T26463] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 404.264746][T26463] ? path_lookupat+0x770/0x770 [ 404.269598][T26463] do_filp_open+0x1de/0x430 [ 404.274259][T26463] ? may_open_dev+0xf0/0xf0 [ 404.278834][T26463] ? expand_files+0x442/0x910 [ 404.283581][T26463] ? _raw_spin_unlock+0x28/0x40 [ 404.288571][T26463] ? alloc_fd+0x2da/0x6c0 [ 404.293045][T26463] do_sys_openat2+0x176/0x1e0 [ 404.297787][T26463] ? build_open_flags+0x690/0x690 [ 404.302935][T26463] __x64_sys_openat+0x175/0x210 [ 404.307852][T26463] ? __ia32_sys_open+0x1e0/0x1e0 [ 404.312840][T26463] ? ksys_write+0x1a7/0x250 [ 404.317404][T26463] ? rcu_is_watching+0x12/0xb0 [ 404.322230][T26463] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 404.328275][T26463] do_syscall_64+0x38/0xb0 14:21:58 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:58 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) [ 404.332745][T26463] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 404.338715][T26463] RIP: 0033:0x7f956867cae9 [ 404.343175][T26463] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 404.363007][T26463] RSP: 002b:00007f95693fc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 404.371480][T26463] RAX: ffffffffffffffda RBX: 00007f956879bf80 RCX: 00007f956867cae9 [ 404.379505][T26463] RDX: 0000000000000002 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 404.387610][T26463] RBP: 00007f95693fc120 R08: 0000000000000000 R09: 0000000000000000 [ 404.395795][T26463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.403824][T26463] R13: 000000000000000b R14: 00007f956879bf80 R15: 00007f95688bfa48 [ 404.411864][T26463] 14:21:58 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (fail_nth: 4) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001c40)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:58 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) 14:21:58 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r0, 0x2) 14:21:58 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:58 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:58 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) [ 404.671735][T26508] FAULT_INJECTION: forcing a failure. [ 404.671735][T26508] name failslab, interval 1, probability 0, space 0, times 0 [ 404.696474][T26508] CPU: 0 PID: 26508 Comm: syz-executor.4 Not tainted 6.6.0-rc1-syzkaller #0 [ 404.705238][T26508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 404.715342][T26508] Call Trace: [ 404.718658][T26508] [ 404.721620][T26508] dump_stack_lvl+0x125/0x1b0 [ 404.726347][T26508] should_fail_ex+0x496/0x5b0 [ 404.731104][T26508] should_failslab+0x9/0x20 [ 404.735662][T26508] kmem_cache_alloc+0x33a/0x3b0 [ 404.740595][T26508] security_file_alloc+0x41/0x250 [ 404.745730][T26508] ? kmem_cache_alloc+0x34e/0x3b0 [ 404.757260][T26508] init_file+0xb9/0x2d0 [ 404.761568][T26508] alloc_empty_file+0x91/0x1d0 [ 404.766395][T26508] path_openat+0xdc/0x29c0 [ 404.770876][T26508] ? __x64_sys_openat+0x175/0x210 [ 404.775955][T26508] ? do_syscall_64+0x38/0xb0 [ 404.780596][T26508] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 404.786722][T26508] ? path_lookupat+0x770/0x770 [ 404.791577][T26508] do_filp_open+0x1de/0x430 [ 404.796124][T26508] ? may_open_dev+0xf0/0xf0 [ 404.800665][T26508] ? expand_files+0x442/0x910 [ 404.805376][T26508] ? _raw_spin_unlock+0x28/0x40 [ 404.810261][T26508] ? alloc_fd+0x2da/0x6c0 [ 404.814616][T26508] do_sys_openat2+0x176/0x1e0 [ 404.819317][T26508] ? build_open_flags+0x690/0x690 [ 404.824368][T26508] __x64_sys_openat+0x175/0x210 [ 404.829332][T26508] ? __ia32_sys_open+0x1e0/0x1e0 [ 404.834291][T26508] ? ksys_write+0x1a7/0x250 [ 404.838824][T26508] ? rcu_is_watching+0x12/0xb0 [ 404.843634][T26508] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 404.849666][T26508] do_syscall_64+0x38/0xb0 [ 404.854148][T26508] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 404.860076][T26508] RIP: 0033:0x7f956867cae9 [ 404.864511][T26508] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 404.884257][T26508] RSP: 002b:00007f95693fc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 404.892697][T26508] RAX: ffffffffffffffda RBX: 00007f956879bf80 RCX: 00007f956867cae9 [ 404.900686][T26508] RDX: 0000000000000002 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 404.908676][T26508] RBP: 00007f95693fc120 R08: 0000000000000000 R09: 0000000000000000 [ 404.916718][T26508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.924714][T26508] R13: 000000000000000b R14: 00007f956879bf80 R15: 00007f95688bfa48 [ 404.932731][T26508] 14:21:58 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) 14:21:58 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) 14:21:58 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:58 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x0, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:58 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (fail_nth: 5) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001c40)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:58 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) 14:21:59 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) 14:21:59 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r4}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r3}) userfaultfd(0x0) [ 405.402046][T26566] FAULT_INJECTION: forcing a failure. [ 405.402046][T26566] name failslab, interval 1, probability 0, space 0, times 0 14:21:59 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x0, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:59 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x0, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) [ 405.449757][T26566] CPU: 0 PID: 26566 Comm: syz-executor.4 Not tainted 6.6.0-rc1-syzkaller #0 [ 405.458522][T26566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 405.468622][T26566] Call Trace: [ 405.471962][T26566] [ 405.474940][T26566] dump_stack_lvl+0x125/0x1b0 [ 405.479677][T26566] should_fail_ex+0x496/0x5b0 [ 405.484443][T26566] should_failslab+0x9/0x20 [ 405.489008][T26566] __kmem_cache_alloc_node+0x2fd/0x350 14:21:59 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) userfaultfd(0x0) [ 405.494582][T26566] ? tomoyo_realpath_from_path+0xb9/0x710 [ 405.500376][T26566] ? tomoyo_realpath_from_path+0xb9/0x710 [ 405.506173][T26566] __kmalloc+0x4f/0x100 [ 405.510466][T26566] tomoyo_realpath_from_path+0xb9/0x710 [ 405.516090][T26566] tomoyo_check_open_permission+0x2aa/0x3b0 [ 405.522056][T26566] ? tomoyo_path_number_perm+0x590/0x590 [ 405.527759][T26566] ? rcu_is_watching+0x12/0xb0 [ 405.532610][T26566] ? make_vfsuid+0x108/0x160 [ 405.537269][T26566] ? hook_path_mknod+0x670/0x670 [ 405.542332][T26566] ? reacquire_held_locks+0x4b0/0x4b0 [ 405.547787][T26566] ? spin_bug+0x1d0/0x1d0 [ 405.552185][T26566] ? make_vfsgid+0x108/0x160 [ 405.556829][T26566] tomoyo_file_open+0xa8/0xd0 [ 405.561588][T26566] security_file_open+0x6a/0xe0 [ 405.566522][T26566] do_dentry_open+0x538/0x1730 [ 405.571364][T26566] ? may_open+0x1f2/0x400 [ 405.575776][T26566] path_openat+0x19af/0x29c0 [ 405.580442][T26566] ? path_lookupat+0x770/0x770 [ 405.585285][T26566] do_filp_open+0x1de/0x430 [ 405.589867][T26566] ? may_open_dev+0xf0/0xf0 [ 405.594455][T26566] ? expand_files+0x442/0x910 [ 405.599193][T26566] ? _raw_spin_unlock+0x28/0x40 [ 405.604112][T26566] ? alloc_fd+0x2da/0x6c0 [ 405.608510][T26566] do_sys_openat2+0x176/0x1e0 [ 405.613241][T26566] ? build_open_flags+0x690/0x690 [ 405.618388][T26566] __x64_sys_openat+0x175/0x210 [ 405.623303][T26566] ? __ia32_sys_open+0x1e0/0x1e0 [ 405.628304][T26566] ? ksys_write+0x1a7/0x250 [ 405.632909][T26566] ? rcu_is_watching+0x12/0xb0 [ 405.637755][T26566] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 405.643810][T26566] do_syscall_64+0x38/0xb0 [ 405.648290][T26566] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 405.654237][T26566] RIP: 0033:0x7f956867cae9 [ 405.658690][T26566] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 405.678355][T26566] RSP: 002b:00007f95693db0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 405.686831][T26566] RAX: ffffffffffffffda RBX: 00007f956879c050 RCX: 00007f956867cae9 [ 405.694854][T26566] RDX: 0000000000000002 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 405.702876][T26566] RBP: 00007f95693db120 R08: 0000000000000000 R09: 0000000000000000 [ 405.710901][T26566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.718925][T26566] R13: 000000000000006e R14: 00007f956879c050 R15: 00007f95688bfa48 [ 405.726963][T26566] [ 405.765639][T26566] ERROR: Out of memory at tomoyo_realpath_from_path. 14:21:59 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x0, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:21:59 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) 14:21:59 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x0, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:59 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) userfaultfd(0x0) 14:21:59 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (fail_nth: 6) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001c40)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:21:59 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x0, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) [ 406.033316][T26618] FAULT_INJECTION: forcing a failure. [ 406.033316][T26618] name failslab, interval 1, probability 0, space 0, times 0 [ 406.046173][T26618] CPU: 0 PID: 26618 Comm: syz-executor.4 Not tainted 6.6.0-rc1-syzkaller #0 [ 406.054924][T26618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 406.065024][T26618] Call Trace: [ 406.068344][T26618] [ 406.071313][T26618] dump_stack_lvl+0x125/0x1b0 [ 406.076059][T26618] should_fail_ex+0x496/0x5b0 14:21:59 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r4}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r3}) [ 406.080822][T26618] should_failslab+0x9/0x20 [ 406.085377][T26618] __kmem_cache_alloc_node+0x2fd/0x350 [ 406.090997][T26618] ? tomoyo_encode2+0x100/0x3d0 [ 406.095957][T26618] ? tomoyo_encode2+0x100/0x3d0 [ 406.100874][T26618] __kmalloc+0x4f/0x100 [ 406.105343][T26618] tomoyo_encode2+0x100/0x3d0 [ 406.110084][T26618] ? rcu_is_watching+0x12/0xb0 [ 406.114916][T26618] tomoyo_encode+0x29/0x50 [ 406.119399][T26618] tomoyo_realpath_from_path+0x196/0x710 [ 406.125113][T26618] tomoyo_check_open_permission+0x2aa/0x3b0 [ 406.131076][T26618] ? tomoyo_path_number_perm+0x590/0x590 [ 406.136774][T26618] ? rcu_is_watching+0x12/0xb0 [ 406.141606][T26618] ? make_vfsuid+0x108/0x160 [ 406.146310][T26618] ? hook_path_mknod+0x670/0x670 [ 406.151316][T26618] ? reacquire_held_locks+0x4b0/0x4b0 [ 406.156763][T26618] ? spin_bug+0x1d0/0x1d0 [ 406.161181][T26618] ? make_vfsgid+0x108/0x160 [ 406.165830][T26618] tomoyo_file_open+0xa8/0xd0 [ 406.170594][T26618] security_file_open+0x6a/0xe0 [ 406.175519][T26618] do_dentry_open+0x538/0x1730 [ 406.180362][T26618] ? may_open+0x1f2/0x400 [ 406.184754][T26618] path_openat+0x19af/0x29c0 [ 406.189470][T26618] ? path_lookupat+0x770/0x770 [ 406.194319][T26618] do_filp_open+0x1de/0x430 [ 406.198896][T26618] ? may_open_dev+0xf0/0xf0 [ 406.203465][T26618] ? expand_files+0x442/0x910 [ 406.208216][T26618] ? _raw_spin_unlock+0x28/0x40 [ 406.213131][T26618] ? alloc_fd+0x2da/0x6c0 [ 406.217551][T26618] do_sys_openat2+0x176/0x1e0 [ 406.222283][T26618] ? build_open_flags+0x690/0x690 [ 406.227372][T26618] __x64_sys_openat+0x175/0x210 [ 406.232280][T26618] ? __ia32_sys_open+0x1e0/0x1e0 [ 406.237271][T26618] ? ksys_write+0x1a7/0x250 [ 406.241860][T26618] ? rcu_is_watching+0x12/0xb0 [ 406.246674][T26618] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 406.252698][T26618] do_syscall_64+0x38/0xb0 [ 406.257146][T26618] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 406.263178][T26618] RIP: 0033:0x7f956867cae9 [ 406.267611][T26618] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 406.287326][T26618] RSP: 002b:00007f95693fc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 406.295759][T26618] RAX: ffffffffffffffda RBX: 00007f956879bf80 RCX: 00007f956867cae9 [ 406.303784][T26618] RDX: 0000000000000002 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 406.311780][T26618] RBP: 00007f95693fc120 R08: 0000000000000000 R09: 0000000000000000 [ 406.319785][T26618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.327772][T26618] R13: 000000000000000b R14: 00007f956879bf80 R15: 00007f95688bfa48 [ 406.335771][T26618] 14:22:00 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) 14:22:00 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:22:00 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) userfaultfd(0x0) [ 406.425278][T26618] ERROR: Out of memory at tomoyo_realpath_from_path. 14:22:00 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) 14:22:00 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x0, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:22:00 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (fail_nth: 7) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001c40)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:22:00 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r6, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f80)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[{}, {}, {}], &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000002080)={0x200, 0x1, &(0x7f0000001d40)=[r10], &(0x7f0000001d80)=[0x3, 0x9, 0xfff], &(0x7f0000002000)=[r3, r5, r2, r4, r11], &(0x7f0000002040)=[0x7, 0x6, 0x7, 0x0, 0x0], 0x0, 0xddb}) userfaultfd(0x0) syz_open_dev$dri(&(0x7f00000020c0), 0xcba4, 0x101000) 14:22:00 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) userfaultfd(0x0) [ 406.682950][T26670] FAULT_INJECTION: forcing a failure. [ 406.682950][T26670] name failslab, interval 1, probability 0, space 0, times 0 [ 406.707342][T26670] CPU: 1 PID: 26670 Comm: syz-executor.4 Not tainted 6.6.0-rc1-syzkaller #0 [ 406.716186][T26670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 406.726370][T26670] Call Trace: [ 406.729671][T26670] [ 406.732649][T26670] dump_stack_lvl+0x125/0x1b0 [ 406.737358][T26670] should_fail_ex+0x496/0x5b0 [ 406.742082][T26670] should_failslab+0x9/0x20 [ 406.746615][T26670] __kmem_cache_alloc_node+0x2fd/0x350 [ 406.752113][T26670] ? virtual_ncidev_open+0x49/0x220 [ 406.757682][T26670] kmalloc_trace+0x25/0xe0 [ 406.762139][T26670] virtual_ncidev_open+0x49/0x220 [ 406.767198][T26670] ? virtual_ncidev_read+0x4e0/0x4e0 [ 406.772508][T26670] misc_open+0x3da/0x4c0 [ 406.776810][T26670] ? misc_devnode+0x120/0x120 [ 406.781714][T26670] chrdev_open+0x277/0x700 [ 406.786177][T26670] ? __unregister_chrdev+0x100/0x100 [ 406.791499][T26670] ? fsnotify_perm.part.0+0x25d/0x630 [ 406.796899][T26670] ? fsnotify_perm.part.0+0x268/0x630 [ 406.802318][T26670] do_dentry_open+0x88b/0x1730 [ 406.807116][T26670] ? __unregister_chrdev+0x100/0x100 [ 406.812440][T26670] ? may_open+0x1f2/0x400 [ 406.816799][T26670] path_openat+0x19af/0x29c0 [ 406.821426][T26670] ? path_lookupat+0x770/0x770 [ 406.826227][T26670] do_filp_open+0x1de/0x430 [ 406.830766][T26670] ? may_open_dev+0xf0/0xf0 [ 406.835300][T26670] ? expand_files+0x442/0x910 [ 406.840010][T26670] ? _raw_spin_unlock+0x28/0x40 [ 406.844899][T26670] ? alloc_fd+0x2da/0x6c0 [ 406.849254][T26670] do_sys_openat2+0x176/0x1e0 [ 406.853951][T26670] ? build_open_flags+0x690/0x690 [ 406.859092][T26670] __x64_sys_openat+0x175/0x210 [ 406.864054][T26670] ? __ia32_sys_open+0x1e0/0x1e0 [ 406.869186][T26670] ? ksys_write+0x1a7/0x250 [ 406.873715][T26670] ? rcu_is_watching+0x12/0xb0 [ 406.878527][T26670] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 406.884549][T26670] do_syscall_64+0x38/0xb0 [ 406.889016][T26670] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 406.894938][T26670] RIP: 0033:0x7f956867cae9 [ 406.899455][T26670] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 406.919084][T26670] RSP: 002b:00007f95693fc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 14:22:00 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:22:00 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) [ 406.927522][T26670] RAX: ffffffffffffffda RBX: 00007f956879bf80 RCX: 00007f956867cae9 [ 406.935512][T26670] RDX: 0000000000000002 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 406.943502][T26670] RBP: 00007f95693fc120 R08: 0000000000000000 R09: 0000000000000000 [ 406.951492][T26670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.959476][T26670] R13: 000000000000000b R14: 00007f956879bf80 R15: 00007f95688bfa48 [ 406.967474][T26670] 14:22:00 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:22:00 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (fail_nth: 8) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001c40)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:22:00 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) userfaultfd(0x0) 14:22:00 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) userfaultfd(0x0) 14:22:00 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:22:00 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) [ 407.216523][T26702] FAULT_INJECTION: forcing a failure. [ 407.216523][T26702] name failslab, interval 1, probability 0, space 0, times 0 [ 407.261581][T26702] CPU: 1 PID: 26702 Comm: syz-executor.4 Not tainted 6.6.0-rc1-syzkaller #0 [ 407.270336][T26702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 407.280436][T26702] Call Trace: [ 407.283753][T26702] [ 407.286719][T26702] dump_stack_lvl+0x125/0x1b0 [ 407.291454][T26702] should_fail_ex+0x496/0x5b0 [ 407.296201][T26702] should_failslab+0x9/0x20 [ 407.300757][T26702] __kmem_cache_alloc_node+0x2fd/0x350 [ 407.306300][T26702] ? nci_allocate_device+0x105/0x430 [ 407.311739][T26702] kmalloc_trace+0x25/0xe0 [ 407.316232][T26702] nci_allocate_device+0x105/0x430 [ 407.321413][T26702] virtual_ncidev_open+0x6f/0x220 [ 407.326489][T26702] ? virtual_ncidev_read+0x4e0/0x4e0 [ 407.331827][T26702] misc_open+0x3da/0x4c0 [ 407.336137][T26702] ? misc_devnode+0x120/0x120 [ 407.340864][T26702] chrdev_open+0x277/0x700 [ 407.345363][T26702] ? __unregister_chrdev+0x100/0x100 [ 407.350717][T26702] ? fsnotify_perm.part.0+0x25d/0x630 [ 407.356147][T26702] ? fsnotify_perm.part.0+0x268/0x630 [ 407.361575][T26702] do_dentry_open+0x88b/0x1730 [ 407.366403][T26702] ? __unregister_chrdev+0x100/0x100 [ 407.371741][T26702] ? may_open+0x1f2/0x400 [ 407.376104][T26702] path_openat+0x19af/0x29c0 [ 407.380733][T26702] ? path_lookupat+0x770/0x770 [ 407.385539][T26702] do_filp_open+0x1de/0x430 [ 407.390092][T26702] ? may_open_dev+0xf0/0xf0 [ 407.394639][T26702] ? expand_files+0x442/0x910 [ 407.399360][T26702] ? _raw_spin_unlock+0x28/0x40 [ 407.404255][T26702] ? alloc_fd+0x2da/0x6c0 [ 407.408638][T26702] do_sys_openat2+0x176/0x1e0 [ 407.413345][T26702] ? build_open_flags+0x690/0x690 [ 407.418411][T26702] __x64_sys_openat+0x175/0x210 [ 407.423462][T26702] ? __ia32_sys_open+0x1e0/0x1e0 [ 407.428514][T26702] ? ksys_write+0x1a7/0x250 [ 407.433069][T26702] ? rcu_is_watching+0x12/0xb0 [ 407.437865][T26702] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 407.443978][T26702] do_syscall_64+0x38/0xb0 [ 407.448420][T26702] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 407.454687][T26702] RIP: 0033:0x7f956867cae9 [ 407.459127][T26702] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 407.478855][T26702] RSP: 002b:00007f95693fc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 407.487293][T26702] RAX: ffffffffffffffda RBX: 00007f956879bf80 RCX: 00007f956867cae9 [ 407.495278][T26702] RDX: 0000000000000002 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 407.503266][T26702] RBP: 00007f95693fc120 R08: 0000000000000000 R09: 0000000000000000 [ 407.511259][T26702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.519243][T26702] R13: 000000000000000b R14: 00007f956879bf80 R15: 00007f95688bfa48 [ 407.527244][T26702] 14:22:01 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) 14:22:01 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (fail_nth: 9) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001c40)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:22:01 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) userfaultfd(0x0) 14:22:01 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) 14:22:01 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:22:01 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) [ 407.826183][T26735] FAULT_INJECTION: forcing a failure. [ 407.826183][T26735] name failslab, interval 1, probability 0, space 0, times 0 [ 407.839266][T26735] CPU: 1 PID: 26735 Comm: syz-executor.4 Not tainted 6.6.0-rc1-syzkaller #0 [ 407.848174][T26735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 407.858358][T26735] Call Trace: [ 407.861678][T26735] [ 407.864645][T26735] dump_stack_lvl+0x125/0x1b0 [ 407.869460][T26735] should_fail_ex+0x496/0x5b0 [ 407.874562][T26735] should_failslab+0x9/0x20 [ 407.879129][T26735] __kmem_cache_alloc_node+0x2fd/0x350 [ 407.884674][T26735] ? nfc_allocate_device+0x15b/0x5e0 [ 407.890118][T26735] kmalloc_trace+0x25/0xe0 [ 407.894650][T26735] nfc_allocate_device+0x15b/0x5e0 [ 407.899831][T26735] ? __init_swait_queue_head+0xca/0x150 [ 407.905417][T26735] nci_allocate_device+0x23b/0x430 [ 407.910566][T26735] virtual_ncidev_open+0x6f/0x220 [ 407.915623][T26735] ? virtual_ncidev_read+0x4e0/0x4e0 [ 407.920931][T26735] misc_open+0x3da/0x4c0 [ 407.925217][T26735] ? misc_devnode+0x120/0x120 [ 407.929933][T26735] chrdev_open+0x277/0x700 [ 407.934389][T26735] ? __unregister_chrdev+0x100/0x100 [ 407.939719][T26735] ? fsnotify_perm.part.0+0x25d/0x630 [ 407.945123][T26735] ? fsnotify_perm.part.0+0x268/0x630 [ 407.950537][T26735] do_dentry_open+0x88b/0x1730 [ 407.955359][T26735] ? __unregister_chrdev+0x100/0x100 [ 407.960688][T26735] ? may_open+0x1f2/0x400 [ 407.965051][T26735] path_openat+0x19af/0x29c0 [ 407.969686][T26735] ? path_lookupat+0x770/0x770 [ 407.974488][T26735] do_filp_open+0x1de/0x430 [ 407.979026][T26735] ? may_open_dev+0xf0/0xf0 [ 407.983561][T26735] ? expand_files+0x442/0x910 [ 407.988278][T26735] ? _raw_spin_unlock+0x28/0x40 [ 407.993159][T26735] ? alloc_fd+0x2da/0x6c0 [ 407.997516][T26735] do_sys_openat2+0x176/0x1e0 [ 408.002212][T26735] ? build_open_flags+0x690/0x690 [ 408.007264][T26735] __x64_sys_openat+0x175/0x210 [ 408.012135][T26735] ? __ia32_sys_open+0x1e0/0x1e0 [ 408.017089][T26735] ? ksys_write+0x1a7/0x250 [ 408.021622][T26735] ? rcu_is_watching+0x12/0xb0 [ 408.026409][T26735] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 408.032418][T26735] do_syscall_64+0x38/0xb0 [ 408.036861][T26735] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 408.042780][T26735] RIP: 0033:0x7f956867cae9 [ 408.047217][T26735] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 408.066855][T26735] RSP: 002b:00007f95693fc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 408.075294][T26735] RAX: ffffffffffffffda RBX: 00007f956879bf80 RCX: 00007f956867cae9 [ 408.083283][T26735] RDX: 0000000000000002 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 408.091272][T26735] RBP: 00007f95693fc120 R08: 0000000000000000 R09: 0000000000000000 [ 408.099290][T26735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.107274][T26735] R13: 000000000000000b R14: 00007f956879bf80 R15: 00007f95688bfa48 [ 408.115287][T26735] 14:22:01 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (fail_nth: 10) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x5, 0x0, 0x4, 0x77}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001bc0)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001c40)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001c80)={0xff}) 14:22:01 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) 14:22:02 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) [ 408.324867][T26763] FAULT_INJECTION: forcing a failure. [ 408.324867][T26763] name failslab, interval 1, probability 0, space 0, times 0 [ 408.374275][T26763] CPU: 0 PID: 26763 Comm: syz-executor.4 Not tainted 6.6.0-rc1-syzkaller #0 [ 408.383044][T26763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 408.393149][T26763] Call Trace: [ 408.396468][T26763] [ 408.399455][T26763] dump_stack_lvl+0x125/0x1b0 [ 408.404197][T26763] should_fail_ex+0x496/0x5b0 [ 408.408953][T26763] should_failslab+0x9/0x20 [ 408.413517][T26763] __kmem_cache_alloc_node+0x2fd/0x350 [ 408.419054][T26763] ? kvasprintf_const+0x66/0x190 [ 408.424093][T26763] ? kvasprintf_const+0x66/0x190 [ 408.429092][T26763] __kmalloc_node_track_caller+0x50/0x100 [ 408.434948][T26763] kvasprintf+0xbd/0x150 [ 408.439262][T26763] ? bust_spinlocks+0xe0/0xe0 [ 408.444014][T26763] ? rcu_is_watching+0x12/0xb0 [ 408.448838][T26763] kvasprintf_const+0x66/0x190 [ 408.453674][T26763] kobject_set_name_vargs+0x5a/0x130 [ 408.459059][T26763] dev_set_name+0xc8/0x100 [ 408.463659][T26763] ? device_initialize+0x510/0x510 [ 408.468860][T26763] nfc_allocate_device+0x206/0x5e0 [ 408.474048][T26763] nci_allocate_device+0x23b/0x430 [ 408.479235][T26763] virtual_ncidev_open+0x6f/0x220 [ 408.484320][T26763] ? virtual_ncidev_read+0x4e0/0x4e0 [ 408.489662][T26763] misc_open+0x3da/0x4c0 [ 408.493976][T26763] ? misc_devnode+0x120/0x120 [ 408.498726][T26763] chrdev_open+0x277/0x700 [ 408.503222][T26763] ? __unregister_chrdev+0x100/0x100 [ 408.508585][T26763] ? fsnotify_perm.part.0+0x25d/0x630 [ 408.514018][T26763] ? fsnotify_perm.part.0+0x268/0x630 [ 408.519640][T26763] do_dentry_open+0x88b/0x1730 [ 408.524493][T26763] ? __unregister_chrdev+0x100/0x100 [ 408.529858][T26763] ? may_open+0x1f2/0x400 [ 408.534258][T26763] path_openat+0x19af/0x29c0 [ 408.538920][T26763] ? path_lookupat+0x770/0x770 [ 408.543732][T26763] do_filp_open+0x1de/0x430 [ 408.548290][T26763] ? may_open_dev+0xf0/0xf0 [ 408.552832][T26763] ? expand_files+0x442/0x910 [ 408.557548][T26763] ? _raw_spin_unlock+0x28/0x40 [ 408.562449][T26763] ? alloc_fd+0x2da/0x6c0 [ 408.566813][T26763] do_sys_openat2+0x176/0x1e0 [ 408.571517][T26763] ? build_open_flags+0x690/0x690 [ 408.576573][T26763] __x64_sys_openat+0x175/0x210 [ 408.581447][T26763] ? __ia32_sys_open+0x1e0/0x1e0 [ 408.586420][T26763] ? ksys_write+0x1a7/0x250 [ 408.590981][T26763] ? rcu_is_watching+0x12/0xb0 [ 408.595768][T26763] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 408.601777][T26763] do_syscall_64+0x38/0xb0 [ 408.606215][T26763] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 408.612131][T26763] RIP: 0033:0x7f956867cae9 [ 408.616565][T26763] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 408.636210][T26763] RSP: 002b:00007f95693fc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 408.644653][T26763] RAX: ffffffffffffffda RBX: 00007f956879bf80 RCX: 00007f956867cae9 [ 408.652648][T26763] RDX: 0000000000000002 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 408.660643][T26763] RBP: 00007f95693fc120 R08: 0000000000000000 R09: 0000000000000000 14:22:02 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) userfaultfd(0x0) 14:22:02 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) [ 408.668660][T26763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 408.676659][T26763] R13: 000000000000000b R14: 00007f956879bf80 R15: 00007f95688bfa48 [ 408.684667][T26763] [ 408.775684][T26763] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 408.787472][T26763] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 408.795928][T26763] CPU: 0 PID: 26763 Comm: syz-executor.4 Not tainted 6.6.0-rc1-syzkaller #0 [ 408.804663][T26763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 408.814769][T26763] RIP: 0010:strchr+0x1b/0xb0 [ 408.819446][T26763] Code: 60 ac f7 48 8b 74 24 08 48 8b 14 24 eb 89 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 83 ec 10 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 51 0f b6 07 89 [ 408.839111][T26763] RSP: 0018:ffffc9000374f630 EFLAGS: 00010286 [ 408.845253][T26763] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000b9a7000 [ 408.853273][T26763] RDX: 0000000000000000 RSI: 0000000000000025 RDI: 0000000000000000 [ 408.861288][T26763] RBP: ffffc9000374f6c0 R08: 0000000000000001 R09: 0000000000000000 [ 408.869312][T26763] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc9000374f6c0 [ 408.877339][T26763] R13: 0000000000000cc0 R14: ffff888141395380 R15: 0000000000000001 [ 408.885389][T26763] FS: 00007f95693fc6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 408.894391][T26763] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.901132][T26763] CR2: 00005555559f68f8 CR3: 000000002068b000 CR4: 00000000003506f0 [ 408.909166][T26763] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 408.917188][T26763] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 408.925224][T26763] Call Trace: [ 408.928544][T26763] [ 408.931509][T26763] ? show_regs+0x8f/0xa0 [ 408.935851][T26763] ? die_addr+0x4f/0xd0 [ 408.940068][T26763] ? exc_general_protection+0x154/0x230 [ 408.945685][T26763] ? asm_exc_general_protection+0x26/0x30 [ 408.951479][T26763] ? strchr+0x1b/0xb0 [ 408.955552][T26763] ? __mutex_unlock_slowpath+0x165/0x640 [ 408.961254][T26763] kvasprintf_const+0x25/0x190 [ 408.966083][T26763] kobject_set_name_vargs+0x5a/0x130 [ 408.971434][T26763] kobject_add+0x12a/0x240 [ 408.975917][T26763] ? kset_create_and_add+0x190/0x190 [ 408.981261][T26763] ? do_raw_spin_unlock+0x173/0x230 [ 408.986569][T26763] ? kobject_put+0xbe/0x440 [ 408.991168][T26763] device_add+0x290/0x1ac0 [ 408.995652][T26763] ? reacquire_held_locks+0x4b0/0x4b0 [ 409.001192][T26763] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 409.008117][T26763] ? lockdep_init_map_type+0x16d/0x7c0 [ 409.013657][T26763] nfc_register_device+0x41/0x3c0 [ 409.018764][T26763] nci_register_device+0x7f4/0xb80 [ 409.023938][T26763] ? nci_init_complete_req+0x410/0x410 [ 409.029462][T26763] ? lockdep_init_map_type+0x16d/0x7c0 [ 409.035016][T26763] virtual_ncidev_open+0x147/0x220 [ 409.040196][T26763] ? virtual_ncidev_read+0x4e0/0x4e0 [ 409.045527][T26763] misc_open+0x3da/0x4c0 [ 409.049834][T26763] ? misc_devnode+0x120/0x120 [ 409.054586][T26763] chrdev_open+0x277/0x700 [ 409.059074][T26763] ? __unregister_chrdev+0x100/0x100 [ 409.064445][T26763] ? fsnotify_perm.part.0+0x25d/0x630 [ 409.069883][T26763] ? fsnotify_perm.part.0+0x268/0x630 [ 409.075324][T26763] do_dentry_open+0x88b/0x1730 [ 409.080160][T26763] ? __unregister_chrdev+0x100/0x100 [ 409.085522][T26763] ? may_open+0x1f2/0x400 [ 409.089920][T26763] path_openat+0x19af/0x29c0 [ 409.094590][T26763] ? path_lookupat+0x770/0x770 [ 409.099430][T26763] do_filp_open+0x1de/0x430 [ 409.104004][T26763] ? may_open_dev+0xf0/0xf0 [ 409.108582][T26763] ? expand_files+0x442/0x910 [ 409.113333][T26763] ? _raw_spin_unlock+0x28/0x40 [ 409.118260][T26763] ? alloc_fd+0x2da/0x6c0 [ 409.122691][T26763] do_sys_openat2+0x176/0x1e0 [ 409.127426][T26763] ? build_open_flags+0x690/0x690 [ 409.132606][T26763] __x64_sys_openat+0x175/0x210 [ 409.137522][T26763] ? __ia32_sys_open+0x1e0/0x1e0 [ 409.142520][T26763] ? ksys_write+0x1a7/0x250 [ 409.147111][T26763] ? rcu_is_watching+0x12/0xb0 [ 409.151922][T26763] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 409.157971][T26763] do_syscall_64+0x38/0xb0 [ 409.162461][T26763] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 409.168422][T26763] RIP: 0033:0x7f956867cae9 [ 409.172887][T26763] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 409.192638][T26763] RSP: 002b:00007f95693fc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 409.201119][T26763] RAX: ffffffffffffffda RBX: 00007f956879bf80 RCX: 00007f956867cae9 [ 409.209145][T26763] RDX: 0000000000000002 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 409.217170][T26763] RBP: 00007f95693fc120 R08: 0000000000000000 R09: 0000000000000000 [ 409.225219][T26763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 409.233247][T26763] R13: 000000000000000b R14: 00007f956879bf80 R15: 00007f95688bfa48 [ 409.241279][T26763] [ 409.244331][T26763] Modules linked in: 14:22:02 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fee000/0x11000)=nil, 0x11000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x14, r0, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xd, 0x6a, 0x9}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f0000001240)=[{0x2, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000001340), 0x9, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) getrusage(0x1, &(0x7f0000001380)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001440)=0x5) getrusage(0x1, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000015c0)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000001740)={0x0, 0x0, r2, 0x200, 0x81, 0x4, 0x6a, 0x5, 0x5, 0x4, 0x77, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0x8, &(0x7f0000001840)=[{}], 0x8, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a80)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000001ac0)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0xff}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001bc0)={r3}) accept$phonet_pipe(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001c80)={0xff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$usbfs(&(0x7f0000002240), 0x8000000000000000, 0x20000) [ 409.315247][T26763] ---[ end trace 0000000000000000 ]--- [ 409.325038][T26763] RIP: 0010:strchr+0x1b/0xb0 [ 409.332010][T26763] Code: 60 ac f7 48 8b 74 24 08 48 8b 14 24 eb 89 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 83 ec 10 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 51 0f b6 07 89 [ 409.356359][T26763] RSP: 0018:ffffc9000374f630 EFLAGS: 00010286 [ 409.382153][T26763] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000b9a7000 [ 409.414352][T26763] RDX: 0000000000000000 RSI: 0000000000000025 RDI: 0000000000000000 [ 409.431851][T26763] RBP: ffffc9000374f6c0 R08: 0000000000000001 R09: 0000000000000000 [ 409.469841][T26763] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc9000374f6c0 [ 409.523480][T26763] R13: 0000000000000cc0 R14: ffff888141395380 R15: 0000000000000001 [ 409.543619][T26763] FS: 00007f95693fc6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 409.553280][T26763] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.599832][T26763] CR2: 0000001b2f524000 CR3: 000000002068b000 CR4: 00000000003506f0 [ 409.610363][T26763] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 409.622437][T26763] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 409.649865][T26763] Kernel panic - not syncing: Fatal exception [ 409.656208][T26763] Kernel Offset: disabled [ 409.660548][T26763] Rebooting in 86400 seconds..